We have onboarded a non-authoritative target application using RESTful webservice connector. No API returns the user-Role relationship. How to configure another Mule API who will provide this Role data and as a result the role detection can be done

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Which IIQ version are you inquiring about?

[8.3]

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

[We have onboarded a non-authoritative target application using RESTful webservice connector. The GETUserdetails API shared by target application team is fetching all the users but there is no association of Roles/Entitlements against the users. Also, we have no other APIs as well which returns the User-Role relationship. We found a MuleSoft API which can return user Role details against each userID. Now , the question is, we already have webService connector for the target application. How can we get the user-Role data via the muleSoft API so that the group aggregation/Identity refresh task can fetch the Role data from target application and be able to detect the Roles]

2

If you dont have any attribute in the response of account relative of the groups, the only way is this:

  • Configure an after op. rule on the account call where you save the id of the group(or other attribute) of the account.
  • Set this attribute like type group
  • Configure the group aggregation.

In the after rule you must call the groups API to save the attribute.