Web Service Connector - Remove Entitlement - Get entitlement id

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,

In my application the url to remove entitlement for a user is
/scim/Groups/<ent. id>
and the body is

{
    "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
    ],
    "Operations": [
        {
            "op": "remove",
            "path": "members[value eq \"$getObject.nativeIdentity$\"]"
        }
    ]
}

The connector is Web Service and the operation I am using is “Remove Entitlement”. The issue I am facing is how can I get the id of entitlement to be remove.
The document only mentioning how to get user id. Need help in how to get the entitlement id to be removed for a user in this case.

Thanks
Mathew

2

Hi @sanumathewipg0207, the provisioning plan holds the entitlement value. It can be retrieved from the plan like : $plan.group$ (here, the “group” is assumed to be part of the account schema that holds the entitlement value/id) similarly, you could access the entitlement value from the plan based on the entitlement attribute that is configured in the account schema.

2 Likes
3

As @prashanthrns mentioned you can call the access requested using variable “plan”. First you need to go and check what is the account attribute name you have given for entitlement. If it is access for example then you have to call the value like this.

/scim/Groups/$plan.access$

You also need to make sure in your entitlement types you have configured “Entitlement Id” to the correct attribute. Which ever attribute you have configured there that attribute will go in the above call.

1 Like
4

Thanks for the responses. $plan.groups$ worked for me as “groups” is the entitlement reference from the account schema. Thank you!
Regards
Mathew