Vertafore - ImageRight API - Create Operation

[sonia_mcdonald]

Which IIQ version are you inquiring about?

8.4

Please share any images or screenshots, if relevant.

Please share any other relevant files that may be required (for example, logs).

Share all details about your problem, including any error messages you may have received.

We are attempting to deploy integration between IIQ and ImageRight. ImageRight is currently integrated with Active Directory for authentication but all ImageRight groups (roles) are provisioned through their Enterprise Management Console. Their current API does not allow Create operation so we cannot leverage adding ImageRight to our RapidSetup Birthright roles. To be able to provision access through IIQ, we must first add an ImageRight group to the user within ImageRight, run account aggregation task, and then we can provision additional entitlements via IIQ. I am curious if anyone in the community has had a similar experience and had a workaround to be able to provision all via IIIQ including leveraging birthright roles to assign ImageRight access.

[SanjeevIAM (Sanjeev Kumar)]

You should be able to configure a birthright role with assignment criteria to check for the ImageRight group (if there is a default group) or at least active status on the application attribute apart from additional assignment criteria for role assignment.

This will assign the birthright roles for the ImageRight applications as soon as SailPoint aggregates a new account which was created in ImageRight application with the default group on the application.

Here is a sample role assignment rule for an application called SCIM APP