Web Service Connector - split multi-value request into separate requests

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello

I am creating a Web Service source, and have groups entitlement.

The issue is that group is a multi-valued attribute, but the back end service can only add one group at a time.

I have an access profile that adds 2 groups, and ISC wants to send both add once - Add Entitlement [‘group1’, ‘group2’]

How can I get ISC to send it as 2 separate Add Entitlement requests? i.e. Add Entitlement group1 then another Add Entitlement group2

Thank you!!

2

@jrossicare

You can update your Web Service source and set addRemoveEntInSingleReq flag to false under connector attributes.

You can go through this doc for reference.

Configuring Requests for Multiple Entitlements

3

Hi Abhinav,

Thanks for the reply. It looks like that should work.

Thanks

4

One interesting thing to note:

Say my entitlement attribute is groupName and I am adding 2 groups group1 and group2in a single access request

I set /connectorAttributes/addRemoveEntInSingleReq to false

If I put $plan.groupName$ in body of my HTTP Operation for add entitlement

Then it works as expected, I see only group1 where I had $plan.groupName$

The interesting thing is, if I dump out groupName attribute request, then it is the Array! not the single value!

for (ProvisioningPlan.AttributeRequest attReq : Util.iterate(accReq.getAttributeRequests())) {
    log.error(logPrefix + "attReq: " + attReq.getName() + " => " + attReq.getValue() + " (" + attReq.getValue().getClass() + ")");

Output

"Test WSBO - attReq: groupName => [group1, group2] (class sailpoint.tools.xml.PersistentArrayList)"
5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.