Skip to main content

Sources

Use this API to implement and customize source functionality. With source functionality in place, organizations can use Identity Security Cloud to connect their various sources and user data sets and manage access across all those different sources in a secure, scalable way.

Sources refer to the Identity Security Cloud representations for external applications, databases, and directory management systems that maintain their own sets of users, like Dropbox, GitHub, and Workday, for example. Organizations may use hundreds, if not thousands, of different source systems, and any one employee within an organization likely has a different user record on each source, often with different permissions on many of those records. Connecting these sources to Identity Security Cloud makes it possible to manage user access across them all. Then, if a new hire starts at an organization, Identity Security Cloud can grant the new hire access to all the sources they need. If an employee moves to a new department and needs access to new sources but no longer needs access to others, Identity Security Cloud can grant the necessary access and revoke the unnecessary access for all the employee's various sources. If an employee leaves the company, Identity Security Cloud can revoke access to all the employee's various source accounts immediately. These are just a few examples of the many ways that source functionality makes identity governance easier, more efficient, and more secure.

In Identity Security Cloud, administrators can create configure, manage, and edit sources, and they can designate other users as source admins to be able to do so. They can also designate users as source sub-admins, who can perform the same source actions but only on sources associated with their governance groups. Admins go to Connections > Sources to see a list of the existing source representations in their organizations. They can create new sources or select existing ones.

To create a new source, the following must be specified: Source Name, Description, Source Owner, and Connection Type. Refer to Configuring a Source for more information about the source configuration process.

Identity Security Cloud connects with its sources either by a direct communication with the source server (connection information specific to the source must be provided) or a flat file feed, a CSV file containing all the relevant information about the accounts to be loaded in. Different sources use different connectors to share data with Identity Security Cloud, and each connector's setup process is specific to that connector. SailPoint has built a number of connectors to come out of the box and connect to the most common sources, and SailPoint actively maintains these connectors. Refer to Identity Security Cloud Connectors for more information about these SailPoint supported connectors. Refer to the following links for more information about two useful connectors:

  • JDBC Connector: This customizable connector an directly connect to databases that support JDBC (Java Database Connectivity).

  • Web Services Connector: This connector can directly connect to databases that support Web Services.

Refer to SaaS Connectivity for more information about SailPoint's new connectivity framework that makes it easy to build and manage custom connectors to SaaS sources.

When admins select existing sources, they can view the following information about the source:

  • Associated connections (any associated identity profiles, apps, or references to the source in a transform).

  • Associated user accounts. These accounts are linked to their identities - this provides a more complete picture of each user's access across sources.

  • Associated entitlements (sets of access rights on sources).

  • Associated access profiles (groupings of entitlements).

The user account data and the entitlements update with each data aggregation from the source. Organizations generally run scheduled, automated data aggregations to ensure that their data is always in sync between their sources and their Identity Security Cloud tenants so an access change on a source is detected quickly in Identity Security Cloud. Admins can view a history of these aggregations, and they can also run manual imports. Refer to Loading Account Data for more information about manual and scheduled aggregations.

Admins can also make changes to determine which user account data Identity Security Cloud collects from the source and how it correlates that account data with identity data. To define which account attributes the source shares with Identity Security Cloud, admins can edit the account schema on the source. Refer to Managing Source Account Schemas for more information about source account schemas and how to edit them. To define the mapping between the source account attributes and their correlating identity attributes, admins can edit the correlation configuration on the source. Refer to Assigning Source Accounts to Identities for more information about this correlation process between source accounts and identities.

Admins can also delete sources, but they must first ensure that the sources no longer have any active connections: the source must not be associated with any identity profile or any app, and it must not be referenced by any transform. Refer to Deleting Sources for more information about deleting sources.

Well organized, mapped out connections between sources and Identity Security Cloud are essential to achieving comprehensive identity access governance across all the source systems organizations need. Refer to Managing Sources for more information about all the different things admins can do with sources once they are connected.

All URIs are relative to https://sailpoint.api.identitynow.com

MethodHTTP requestDescription
New-ProvisioningPolicyV1POST /sources/v1/{sourceId}/provisioning-policiesCreate provisioning policy
New-ProvisioningPolicyV2POST /sources/v2/{sourceId}/provisioning-policiesCreate provisioning policy
New-SourceScheduleV1POST /sources/v1/{sourceId}/schedulesCreate schedule on source
New-SourceSchemaV1POST /sources/v1/{sourceId}/schemasCreate schema on source
New-SourceV1POST /sources/v1Creates a source in identitynow.
Remove-AccountsAsyncV1POST /sources/v1/{id}/remove-accountsRemove all accounts in source
Remove-NativeChangeDetectionConfigV1DELETE /sources/v1/{sourceId}/native-change-detection-configDelete native change detection configuration
Remove-ProvisioningPolicyV1DELETE /sources/v1/{sourceId}/provisioning-policies/{usageType}Delete provisioning policy by usagetype
Remove-ProvisioningPolicyV2DELETE /sources/v2/{sourceId}/provisioning-policies/{id}Delete provisioning policy by ID
Remove-SourceScheduleV1DELETE /sources/v1/{sourceId}/schedules/{scheduleType}Delete source schedule by type.
Remove-SourceSchemaV1DELETE /sources/v1/{sourceId}/schemas/{schemaId}Delete source schema by id
Remove-SourceV1DELETE /sources/v1/{id}Delete source by id
Get-AccountDeleteApprovalConfigV1GET /sources/v1/{sourceId}/approval-config/account-deleteHuman Account Deletion Approval Config
Get-AccountsSchemaV1GET /sources/v1/{id}/schemas/accountsDownloads source accounts schema template
Get-CorrelationConfigV1GET /sources/v1/{id}/correlation-configGet source correlation configuration
Get-EntitlementsSchemaV1GET /sources/v1/{id}/schemas/entitlementsDownloads source entitlements schema template
Get-MachineAccountDeletionApprovalConfigBySourceV1GET /sources/v1/{sourceId}/approval-config/machine-account-deleteMachine Account Deletion Approval Config
Get-NativeChangeDetectionConfigV1GET /sources/v1/{sourceId}/native-change-detection-configNative change detection configuration
Get-ProvisioningPolicyV1GET /sources/v1/{sourceId}/provisioning-policies/{usageType}Get provisioning policy by usagetype
Get-ProvisioningPolicyV2GET /sources/v2/{sourceId}/provisioning-policies/{id}Get provisioning policy by ID
Get-SourceAttrSyncConfigV1GET /sources/v1/{id}/attribute-sync-configAttribute sync config
Get-SourceConfigV1GET /sources/v1/{id}/connectors/source-configGets source config with language-translations
Get-SourceConnectionsV1GET /sources/v1/{sourceId}/connectionsGet source connections by id
Get-SourceEntitlementRequestConfigV1GET /sources/v1/{id}/entitlement-request-configGet source entitlement request configuration
Get-SourceHealthV1GET /sources/v1/{sourceId}/source-healthFetches source health by id
Get-SourceScheduleV1GET /sources/v1/{sourceId}/schedules/{scheduleType}Get source schedule by type
Get-SourceSchedulesV1GET /sources/v1/{sourceId}/schedulesList schedules on source
Get-SourceSchemaV1GET /sources/v1/{sourceId}/schemas/{schemaId}Get source schema by id
Get-SourceSchemasV1GET /sources/v1/{sourceId}/schemasList schemas on source
Get-SourceV1GET /sources/v1/{id}Get source by id
Import-AccountsSchemaV1POST /sources/v1/{id}/schemas/accountsUploads source accounts schema template
Import-AccountsV1POST /sources/v1/{id}/load-accountsAccount aggregation
Import-ConnectorFileV1POST /sources/v1/{sourceId}/upload-connector-fileUpload connector file to source
Import-EntitlementsSchemaV1POST /sources/v1/{id}/schemas/entitlementsUploads source entitlements schema template
Import-EntitlementsV1POST /sources/v1/{sourceId}/load-entitlementsEntitlement aggregation
Import-UncorrelatedAccountsV1POST /sources/v1/{id}/load-uncorrelated-accountsProcess uncorrelated accounts
Get-PasswordPolicyHoldersOnSourceV1GET /sources/v1/{sourceId}/password-policiesGet Password Policy for source
Get-ProvisioningPoliciesV1GET /sources/v1/{sourceId}/provisioning-policiesLists provisioningpolicies
Get-ProvisioningPoliciesV2GET /sources/v2/{sourceId}/provisioning-policiesLists Provisioning Policies
Get-SourcesV1GET /sources/v1Lists all sources in identitynow.
Ping-ClusterV1POST /sources/v1/{sourceId}/connector/ping-clusterPing cluster for source connector
Send-CorrelationConfigV1PUT /sources/v1/{id}/correlation-configUpdate source correlation configuration
Send-NativeChangeDetectionConfigV1PUT /sources/v1/{sourceId}/native-change-detection-configUpdate native change detection configuration
Send-ProvisioningPolicyV1PUT /sources/v1/{sourceId}/provisioning-policies/{usageType}Update provisioning policy by usagetype
Send-ProvisioningPolicyV2PUT /sources/v2/{sourceId}/provisioning-policies/{id}Update provisioning policy by ID
Send-SourceAttrSyncConfigV1PUT /sources/v1/{id}/attribute-sync-configUpdate attribute sync config
Send-SourceSchemaV1PUT /sources/v1/{sourceId}/schemas/{schemaId}Update source schema (full)
Send-SourceV1PUT /sources/v1/{id}Update source (full)
Search-ResourceObjectsV1POST /sources/v1/{sourceId}/connector/peek-resource-objectsPeek source connector's resource objects
Sync-AttributesForSourceV1POST /sources/v1/{id}/synchronize-attributesSynchronize single source attributes.
Test-SourceConfigurationV1POST /sources/v1/{sourceId}/connector/test-configurationTest configuration for source connector
Test-SourceConnectionV1POST /sources/v1/{sourceId}/connector/check-connectionCheck connection for source connector.
Update-AccountDeletionApprovalConfigV1PATCH /sources/v1/{sourceId}/approval-config/account-deleteHuman Account Deletion Approval Config
Update-MachineAccountDeletionApprovalConfigV1PATCH /sources/v1/{sourceId}/approval-config/machine-account-deleteMachine Account Deletion Approval Config
Update-PasswordPolicyHoldersV1PATCH /sources/v1/{sourceId}/password-policiesUpdate password policy
Update-ProvisioningPoliciesInBulkV1POST /sources/v1/{sourceId}/provisioning-policies/bulk-updateBulk update provisioning policies
Update-ProvisioningPolicyV1PATCH /sources/v1/{sourceId}/provisioning-policies/{usageType}Partial update of provisioning policy
Update-ProvisioningPolicyV2PATCH /sources/v2/{sourceId}/provisioning-policies/{id}Partial update of provisioning policy
Update-SourceEntitlementRequestConfigV1PUT /sources/v1/{id}/entitlement-request-configUpdate source entitlement request configuration
Update-SourceScheduleV1PATCH /sources/v1/{sourceId}/schedules/{scheduleType}Update source schedule (partial)
Update-SourceSchemaV1PATCH /sources/v1/{sourceId}/schemas/{schemaId}Update source schema (partial)
Update-SourceV1PATCH /sources/v1/{id}Update source (partial)

create-provisioning-policy-v1

This API generates a create policy/template based on field value transforms. This API is intended for use when setting up JDBC Provisioning type sources, but it will also work on other source types. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
BodyProvisioningpolicydtoProvisioningpolicydtoTrue

Return type

Provisioningpolicydto

Responses

CodeDescriptionData Type
201Created ProvisioningPolicyDto objectProvisioningpolicydto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id
$Provisioningpolicydto = @"{"name":"Account","description":"Account Provisioning Policy","usageType":"CREATE","fields":[{"name":"displayName","transform":{"type":"identityAttribute","attributes":{"name":"displayName"}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false},{"name":"distinguishedName","transform":{"type":"usernameGenerator","attributes":{"sourceCheck":true,"patterns":["CN=$fi $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fti $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fn $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fn$ln${uniqueCounter},OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com"],"fn":{"type":"identityAttribute","attributes":{"name":"firstname"}},"ln":{"type":"identityAttribute","attributes":{"name":"lastname"}},"fi":{"type":"substring","attributes":{"input":{"type":"identityAttribute","attributes":{"name":"firstname"}},"begin":0,"end":1}},"fti":{"type":"substring","attributes":{"input":{"type":"identityAttribute","attributes":{"name":"firstname"}},"begin":0,"end":2}}}},"attributes":{"cloudMaxUniqueChecks":"5","cloudMaxSize":"100","cloudRequired":"true"},"isRequired":false,"type":"","isMultiValued":false},{"name":"description","transform":{"type":"static","attributes":{"value":""}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false}]}"@

# Create provisioning policy

try {
$Result = ConvertFrom-JsonToProvisioningpolicydto -Json $Provisioningpolicydto
New-ProvisioningPolicyV1 -SourceId $SourceId -Provisioningpolicydto $Result

# Below is a request that includes all optional parameters
# New-ProvisioningPolicyV1 -SourceId $SourceId -Provisioningpolicydto $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling New-ProvisioningPolicyV1"
Write-Host $_.ErrorDetails
}

[Back to top]

create-provisioning-policy-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This API generates a create policy/template based on field value transforms. This API is intended for use when setting up JDBC Provisioning type sources, but it will also work on other source types. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. The V2 API allows you to use a unique identifier (id) for each provisioning policy instead of usageType. This enables read, update, and delete operations on policies using their id. Note: The subtypeId field is required if usageType is CREATE_MACHINE_ACCOUNT. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
BodyProvisioningpolicydtov2Provisioningpolicydtov2True
QueryUseDefaultFieldsBoolean(optional) (default to $false)If passed as true, then it uses default fields from the connector template.

Return type

Provisioningpolicydtov2

Responses

CodeDescriptionData Type
201Created ProvisioningPolicyDtoV2 objectProvisioningpolicydtov2
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Provisioningpolicydtov2 = @"{"name":"Account","description":"Account Provisioning Policy","usageType":"CREATE","fields":[{"name":"displayName","transform":{"type":"identityAttribute","attributes":{"name":"displayName"}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false},{"name":"distinguishedName","transform":{"type":"usernameGenerator","attributes":{"sourceCheck":true,"patterns":["CN=$fi $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fti $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fn $ln,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com","CN=$fn$ln<uniqueCounter>,OU=zzUsers,OU=Demo,DC=seri,DC=sailpointdemo,DC=com"],"fn":{"type":"identityAttribute","attributes":{"name":"firstname"}},"ln":{"type":"identityAttribute","attributes":{"name":"lastname"}},"fi":{"type":"substring","attributes":{"input":{"type":"identityAttribute","attributes":{"name":"firstname"}},"begin":0,"end":1}},"fti":{"type":"substring","attributes":{"input":{"type":"identityAttribute","attributes":{"name":"firstname"}},"begin":0,"end":2}}}},"attributes":{"cloudMaxUniqueChecks":"5","cloudMaxSize":"100","cloudRequired":"true"},"isRequired":false,"type":"","isMultiValued":false},{"name":"description","transform":{"type":"static","attributes":{"value":""}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false}]}"@
$UseDefaultFields = $false # Boolean | If passed as true, then it uses default fields from the connector template. (optional) (default to $false)

# Create provisioning policy

try {
$Result = ConvertFrom-JsonToProvisioningpolicydtov2 -Json $Provisioningpolicydtov2
New-ProvisioningPolicyV2 -SourceId $SourceId -XSailPointExperimental $XSailPointExperimental -Provisioningpolicydtov2 $Result

# Below is a request that includes all optional parameters
# New-ProvisioningPolicyV2 -SourceId $SourceId -XSailPointExperimental $XSailPointExperimental -Provisioningpolicydtov2 $Result -UseDefaultFields $UseDefaultFields
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling New-ProvisioningPolicyV2"
Write-Host $_.ErrorDetails
}

[Back to top]

create-source-schedule-v1

Use this API to create a new schedule for a type on the specified source in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource ID.
BodySchedule3Schedule3True

Return type

Schedule3

Responses

CodeDescriptionData Type
201The schedule was successfully created on the specified source.Schedule3
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | Source ID.
$Schedule3 = @""@

# Create schedule on source

try {
$Result = ConvertFrom-JsonToSchedule3 -Json $Schedule3
New-SourceScheduleV1 -SourceId $SourceId -Schedule3 $Result

# Below is a request that includes all optional parameters
# New-SourceScheduleV1 -SourceId $SourceId -Schedule3 $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling New-SourceScheduleV1"
Write-Host $_.ErrorDetails
}

[Back to top]

create-source-schema-v1

Use this API to create a new schema on the specified source in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource ID.
BodySchemaSchemaTrue

Return type

Schema

Responses

CodeDescriptionData Type
201The schema was successfully created on the specified source.Schema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | Source ID.
$Schema = @""@

# Create schema on source

try {
$Result = ConvertFrom-JsonToSchema -Json $Schema
New-SourceSchemaV1 -SourceId $SourceId -Schema $Result

# Below is a request that includes all optional parameters
# New-SourceSchemaV1 -SourceId $SourceId -Schema $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling New-SourceSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

create-source-v1

This creates a specific source with a full source JSON representation. Any passwords are submitted as plain-text and encrypted upon receipt in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
BodySourceSourceTrue
QueryProvisionAsCsvBoolean(optional)If this parameter is true, it configures the source as a Delimited File (CSV) source. Setting this to true will automatically set the type of the source to DelimitedFile. You must use this query parameter to create a Delimited File source as you would in the UI. If you don't set this query parameter and you attempt to set the type attribute directly, the request won't correctly generate the source.

Return type

Source

Responses

CodeDescriptionData Type
201Created Source object. Any passwords will only show the the encrypted cipher-text, as they are not decrypt-able in IdentityNow cloud-based services, per IdentityNow security design.Source
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$Source = @""@
$ProvisionAsCsv = $false # Boolean | If this parameter is `true`, it configures the source as a Delimited File (CSV) source. Setting this to `true` will automatically set the `type` of the source to `DelimitedFile`. You must use this query parameter to create a Delimited File source as you would in the UI. If you don't set this query parameter and you attempt to set the `type` attribute directly, the request won't correctly generate the source. (optional)

# Creates a source in identitynow.

try {
$Result = ConvertFrom-JsonToSource -Json $Source
New-SourceV1 -Source $Result

# Below is a request that includes all optional parameters
# New-SourceV1 -Source $Result -ProvisionAsCsv $ProvisionAsCsv
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling New-SourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-accounts-async-v1

Use this endpoint to remove all accounts from the system without provisioning changes to the source. Accounts that are removed could be re-created during the next aggregation.

This endpoint is good for:

  • Removing accounts that no longer exist on the source.
  • Removing accounts that won't be aggregated following updates to the source configuration.
  • Forcing accounts to be re-created following the next aggregation to re-run account processing, support testing, etc.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe source id

Return type

Taskresultdto

Responses

CodeDescriptionData Type
202Accepted. Returns task result details of removal request.Taskresultdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "ebbf35756e1140699ce52b233121384a" # String | The source id

# Remove all accounts in source

try {
Remove-AccountsAsyncV1 -Id $Id

# Below is a request that includes all optional parameters
# Remove-AccountsAsyncV1 -Id $Id
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-AccountsAsyncV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-native-change-detection-config-v1

Deletes the native change detection configuration for the source specified by the given ID.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe source id

Return type

(empty response body)

Responses

CodeDescriptionData Type
204No content - indicates the request was successful but there is no content to be returned in the response.
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The source id

# Delete native change detection configuration

try {
Remove-NativeChangeDetectionConfigV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Remove-NativeChangeDetectionConfigV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-NativeChangeDetectionConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-provisioning-policy-v1

Deletes the provisioning policy with the specified usage on an application.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathUsageTypeUsagetypeTrueThe type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.

Return type

(empty response body)

Responses

CodeDescriptionData Type
204No content - indicates the request was successful but there is no content to be returned in the response.
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$UsageType = "CREATE" # Usagetype | The type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.

# Delete provisioning policy by usagetype

try {
Remove-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType

# Below is a request that includes all optional parameters
# Remove-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-ProvisioningPolicyV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-provisioning-policy-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

Deletes the provisioning policy with the specified ID on an application.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathIdStringTrueThe provisioning policy ID.
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.

Return type

(empty response body)

Responses

CodeDescriptionData Type
204No content - indicates the request was successful but there is no content to be returned in the response.
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$Id = "f5dd23fe-3414-42b7-bb1c-869400ad7a10" # String | The provisioning policy ID.
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")

# Delete provisioning policy by ID

try {
Remove-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Remove-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-ProvisioningPolicyV2"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-source-schedule-v1

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathScheduleTypeStringTrueThe Schedule type.

Return type

(empty response body)

Responses

CodeDescriptionData Type
204No content - indicates the request was successful but there is no content to be returned in the response.
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$ScheduleType = "ACCOUNT_AGGREGATION" # String | The Schedule type.

# Delete source schedule by type.

try {
Remove-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType

# Below is a request that includes all optional parameters
# Remove-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-SourceScheduleV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-source-schema-v1

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathSchemaIdStringTrueThe Schema id.

Return type

(empty response body)

Responses

CodeDescriptionData Type
204No content - indicates the request was successful but there is no content to be returned in the response.
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$SchemaId = "2c9180835d191a86015d28455b4a2329" # String | The Schema id.

# Delete source schema by id

try {
Remove-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId

# Below is a request that includes all optional parameters
# Remove-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-SourceSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

delete-source-v1

Use this API to delete a specific source in Identity Security Cloud (ISC). The API removes all the accounts on the source first, and then it deletes the source. You can retrieve the actual task execution status with this method: GET /task-status/{id}

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource ID.

Return type

DeleteSourceV1202Response

Responses

CodeDescriptionData Type
202Accepted - Returned if the request was successfully accepted into the system.DeleteSourceV1202Response
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | Source ID.

# Delete source by id

try {
Remove-SourceV1 -Id $Id

# Below is a request that includes all optional parameters
# Remove-SourceV1 -Id $Id
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Remove-SourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-account-delete-approval-config-v1

The endpoint retrieves the approval configuration for deleting human accounts from a specified source. It returns details such as whether approval is required, who the approvers are, and any additional approval settings. This helps administrators understand and manage the approval workflow for human account deletions in their organization. The response is provided as an AccountDeleteConfigDto object.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id

Return type

Accountdeleteconfigdto

Responses

CodeDescriptionData Type
200Responds with a AccountDeleteConfigDto for human account deletion approval config by sourceId.Accountdeleteconfigdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "ha38f94347e94562b5bb8424a56498d8" # String | The Source id

# Human Account Deletion Approval Config

try {
Get-AccountDeleteApprovalConfigV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-AccountDeleteApprovalConfigV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-AccountDeleteApprovalConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-accounts-schema-v1

This API downloads the CSV schema that defines the account attributes on a source.

NOTE: This API is designated only for Delimited File sources.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id

Return type

(empty response body)

Responses

CodeDescriptionData Type
200Successfully downloaded the file
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: text/csv, application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id

# Downloads source accounts schema template

try {
Get-AccountsSchemaV1 -Id $Id

# Below is a request that includes all optional parameters
# Get-AccountsSchemaV1 -Id $Id
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-AccountsSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-correlation-config-v1

This API returns the existing correlation configuration for a source specified by the given ID.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe source id

Return type

Correlationconfig

Responses

CodeDescriptionData Type
200Correlation configuration for a sourceCorrelationconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | The source id

# Get source correlation configuration

try {
Get-CorrelationConfigV1 -Id $Id

# Below is a request that includes all optional parameters
# Get-CorrelationConfigV1 -Id $Id
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-CorrelationConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-entitlements-schema-v1

This API downloads the CSV schema that defines the entitlement attributes on a source.

NOTE: This API is designated only for Delimited File sources.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
QuerySchemaNameString(optional)Name of entitlement schema

Return type

(empty response body)

Responses

CodeDescriptionData Type
200Successfully downloaded the file
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: text/csv, application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$SchemaName = "?schemaName=group" # String | Name of entitlement schema (optional)

# Downloads source entitlements schema template

try {
Get-EntitlementsSchemaV1 -Id $Id

# Below is a request that includes all optional parameters
# Get-EntitlementsSchemaV1 -Id $Id -SchemaName $SchemaName
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-EntitlementsSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-machine-account-deletion-approval-config-by-source-v1

Retrieves the machine account deletion approval configuration for a specific source. This endpoint returns details about the approval requirements, approvers, and comment settings that govern the deletion of machine accounts associated with the given source ID.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTruesource id.

Return type

Accountdeleteconfigdto

Responses

CodeDescriptionData Type
200Responds with a AccountDeleteConfigDto for machine account deletion approval config by sourceId.Accountdeleteconfigdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "gt38f94347e94562b5bb8424a56498d8" # String | source id.

# Machine Account Deletion Approval Config

try {
Get-MachineAccountDeletionApprovalConfigBySourceV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-MachineAccountDeletionApprovalConfigBySourceV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-MachineAccountDeletionApprovalConfigBySourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-native-change-detection-config-v1

This API returns the existing native change detection configuration for a source specified by the given ID.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe source id

Return type

Nativechangedetectionconfig

Responses

CodeDescriptionData Type
200Native change detection configuration for a sourceNativechangedetectionconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The source id

# Native change detection configuration

try {
Get-NativeChangeDetectionConfigV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-NativeChangeDetectionConfigV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-NativeChangeDetectionConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-provisioning-policy-v1

This end-point retrieves the ProvisioningPolicy with the specified usage on the specified Source in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathUsageTypeUsagetypeTrueThe type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.

Return type

Provisioningpolicydto

Responses

CodeDescriptionData Type
200The requested ProvisioningPolicyDto was successfully retrieved.Provisioningpolicydto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$UsageType = "CREATE" # Usagetype | The type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.

# Get provisioning policy by usagetype

try {
Get-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType

# Below is a request that includes all optional parameters
# Get-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-ProvisioningPolicyV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-provisioning-policy-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This end-point retrieves the ProvisioningPolicy with the specified ID on the specified Source in Identity Security Cloud.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathIdStringTrueThe provisioning policy ID.
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.

Return type

Provisioningpolicydtov2

Responses

CodeDescriptionData Type
200The requested ProvisioningPolicyDtoV2 was successfully retrieved.Provisioningpolicydtov2
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$Id = "f5dd23fe-3414-42b7-bb1c-869400ad7a10" # String | The provisioning policy ID.
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")

# Get provisioning policy by ID

try {
Get-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Get-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-ProvisioningPolicyV2"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-attr-sync-config-v1

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This API returns the existing attribute synchronization configuration for a source specified by the given ID. The response contains all attributes, regardless of whether they enabled or not.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.

Return type

Attrsyncsourceconfig

Responses

CodeDescriptionData Type
200Attribute synchronization configuration for a sourceAttrsyncsourceconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | The source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")

# Attribute sync config

try {
Get-SourceAttrSyncConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Get-SourceAttrSyncConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceAttrSyncConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-config-v1

Looks up and returns the source config for the requested source id after populating the source config values and applying language translations.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
QueryLocaleString(optional)The locale to apply to the config. If no viable locale is given, it will default to ""en""

Return type

Connectordetail

Responses

CodeDescriptionData Type
200A Connector Detail objectConnectordetail
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "cef3ee201db947c5912551015ba0c679" # String | The Source id
$Locale = "de" # String | The locale to apply to the config. If no viable locale is given, it will default to ""en"" (optional)

# Gets source config with language-translations

try {
Get-SourceConfigV1 -Id $Id

# Below is a request that includes all optional parameters
# Get-SourceConfigV1 -Id $Id -Locale $Locale
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-connections-v1

Use this API to get all dependent Profiles, Attributes, Applications and Custom Transforms for a source by a specified ID in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource ID.

Return type

Sourceconnectionsdto

Responses

CodeDescriptionData Type
200Source Connections object.Sourceconnectionsdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | Source ID.

# Get source connections by id

try {
Get-SourceConnectionsV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-SourceConnectionsV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceConnectionsV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-entitlement-request-config-v1

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This API gets the current entitlement request configuration for a source. This source-level configuration should apply for all the entitlements in the source.

Access request to any entitlements in the source should follow this configuration unless a separate entitlement-level configuration is defined.

  • During access request, this source-level entitlement request configuration overrides the global organization-level configuration.
  • However, the entitlement-level configuration (if defined) overrides this source-level configuration.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.

Return type

Sourceentitlementrequestconfig

Responses

CodeDescriptionData Type
200Source Entitlement Request Configuration Details.Sourceentitlementrequestconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")

# Get source entitlement request configuration

try {
Get-SourceEntitlementRequestConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Get-SourceEntitlementRequestConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceEntitlementRequestConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-health-v1

This endpoint fetches source health by source's id

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.

Return type

Sourcehealthdto

Responses

CodeDescriptionData Type
200Fetched source health successfullySourcehealthdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.

# Fetches source health by id

try {
Get-SourceHealthV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-SourceHealthV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceHealthV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-schedule-v1

Get the source schedule by type in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathScheduleTypeStringTrueThe Schedule type.

Return type

Schedule3

Responses

CodeDescriptionData Type
200The requested Schedule was successfully retrieved.Schedule3
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$ScheduleType = "ACCOUNT_AGGREGATION" # String | The Schedule type.

# Get source schedule by type

try {
Get-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType

# Below is a request that includes all optional parameters
# Get-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceScheduleV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-schedules-v1

Use this API to list the schedules that exist on the specified source in Identity Security Cloud (ISC).

info

This endpoint uses a cron expression to schedule a task, following standard cron job syntax.

For example, 0 0 12 1/1 * ? * runs the task daily at 12:00 PM.

Days of the week are represented as 1-7 (Sunday-Saturday).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource ID.

Return type

Schedule3[]

Responses

CodeDescriptionData Type
200The schedules were successfully retrieved.Schedule3[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | Source ID.

# List schedules on source

try {
Get-SourceSchedulesV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-SourceSchedulesV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceSchedulesV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-schema-v1

Get the Source Schema by ID in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathSchemaIdStringTrueThe Schema id.

Return type

Schema

Responses

CodeDescriptionData Type
200The requested Schema was successfully retrieved.Schema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$SchemaId = "2c9180835d191a86015d28455b4a2329" # String | The Schema id.

# Get source schema by id

try {
Get-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId

# Below is a request that includes all optional parameters
# Get-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-schemas-v1

Use this API to list the schemas that exist on the specified source in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource ID.
QueryIncludeTypesString(optional)If set to 'group', then the account schema is filtered and only group schemas are returned. Only a value of 'group' is recognized presently. Note: The API will check whether include-types is group or not, if not, it will list schemas based on include-names, if include-names is not provided, it will list all schemas.
QueryIncludeNamesString(optional)A comma-separated list of schema names to filter result.

Return type

Schema[]

Responses

CodeDescriptionData Type
200The schemas were successfully retrieved.Schema[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | Source ID.
$IncludeTypes = "group" # String | If set to 'group', then the account schema is filtered and only group schemas are returned. Only a value of 'group' is recognized presently. Note: The API will check whether include-types is group or not, if not, it will list schemas based on include-names, if include-names is not provided, it will list all schemas. (optional)
$IncludeNames = "account" # String | A comma-separated list of schema names to filter result. (optional)

# List schemas on source

try {
Get-SourceSchemasV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-SourceSchemasV1 -SourceId $SourceId -IncludeTypes $IncludeTypes -IncludeNames $IncludeNames
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceSchemasV1"
Write-Host $_.ErrorDetails
}

[Back to top]

get-source-v1

Use this API to get a source by a specified ID in Identity Security Cloud (ISC).

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource ID.

Return type

Source

Responses

CodeDescriptionData Type
200Source object.Source
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | Source ID.

# Get source by id

try {
Get-SourceV1 -Id $Id

# Below is a request that includes all optional parameters
# Get-SourceV1 -Id $Id
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-accounts-schema-v1

This API uploads a source schema template file to configure a source's account attributes.

To retrieve the file to modify and upload, log into Identity Now.

Click Admin -> Connections -> Sources -> {SourceName} -> Import Data -> Account Schema -> Options -> Download Schema

NOTE: This API is designated only for Delimited File sources.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
FileSystem.IO.FileInfo(optional)

Return type

Schema

Responses

CodeDescriptionData Type
200Successfully uploaded the fileSchema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$File = # System.IO.FileInfo | (optional)

# Uploads source accounts schema template

try {
Import-AccountsSchemaV1 -Id $Id

# Below is a request that includes all optional parameters
# Import-AccountsSchemaV1 -Id $Id -File $File
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-AccountsSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-accounts-v1

Starts an account aggregation on the specified source. If the target source is a delimited file source, then the CSV file needs to be included in the request body. You will also need to set the Content-Type header to multipart/form-data.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource Id
FileSystem.IO.FileInfo(optional)The CSV file containing the source accounts to aggregate.
DisableOptimizationString(optional)Use this flag to reprocess every account whether or not the data has changed.

Return type

Loadaccountstask

Responses

CodeDescriptionData Type
202Aggregate Accounts TaskLoadaccountstask
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$Id = "ef38f94347e94562b5bb8424a56397d8" # String | Source Id
$File = # System.IO.FileInfo | The CSV file containing the source accounts to aggregate. (optional)
$DisableOptimization = "MyDisableOptimization" # String | Use this flag to reprocess every account whether or not the data has changed. (optional)

# Account aggregation

try {
Import-AccountsV1 -Id $Id

# Below is a request that includes all optional parameters
# Import-AccountsV1 -Id $Id -File $File -DisableOptimization $DisableOptimization
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-AccountsV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-connector-file-v1

This uploads a supplemental source connector file (like jdbc driver jars) to a source's S3 bucket. This also sends ETS and Audit events.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
FileSystem.IO.FileInfo(optional)

Return type

Source

Responses

CodeDescriptionData Type
200Uploaded the file successfully and sent all post-upload eventsSource
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$File = # System.IO.FileInfo | (optional)

# Upload connector file to source

try {
Import-ConnectorFileV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Import-ConnectorFileV1 -SourceId $SourceId -File $File
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-ConnectorFileV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-entitlements-schema-v1

This API uploads a source schema template file to configure a source's entitlement attributes.

To retrieve the file to modify and upload, log into Identity Now.

Click Admin -> Connections -> Sources -> {SourceName} -> Import Data -> Import Entitlements -> Download

NOTE: This API is designated only for Delimited File sources.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
QuerySchemaNameString(optional)Name of entitlement schema
FileSystem.IO.FileInfo(optional)

Return type

Schema

Responses

CodeDescriptionData Type
200Successfully uploaded the fileSchema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$SchemaName = "?schemaName=group" # String | Name of entitlement schema (optional)
$File = # System.IO.FileInfo | (optional)

# Uploads source entitlements schema template

try {
Import-EntitlementsSchemaV1 -Id $Id

# Below is a request that includes all optional parameters
# Import-EntitlementsSchemaV1 -Id $Id -SchemaName $SchemaName -File $File
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-EntitlementsSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-entitlements-v1

Starts an entitlement aggregation on the specified source. If the target source is a delimited file source, then the CSV file needs to be included in the request body. You will also need to set the Content-Type header to multipart/form-data. A token with ORG_ADMIN, SOURCE_ADMIN, or SOURCE_SUBADMIN authority is required to call this API.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueSource Id
FileSystem.IO.FileInfo(optional)The CSV file containing the source entitlements to aggregate.

Return type

Loadentitlementtask

Responses

CodeDescriptionData Type
202Aggregate Entitlements TaskLoadentitlementtask
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$SourceId = "ef38f94347e94562b5bb8424a56397d8" # String | Source Id
$File = # System.IO.FileInfo | The CSV file containing the source entitlements to aggregate. (optional)

# Entitlement aggregation

try {
Import-EntitlementsV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Import-EntitlementsV1 -SourceId $SourceId -File $File
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-EntitlementsV1"
Write-Host $_.ErrorDetails
}

[Back to top]

import-uncorrelated-accounts-v1

File is required for upload. You will also need to set the Content-Type header to multipart/form-data

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource Id
FileSystem.IO.FileInfo(optional)

Return type

Loaduncorrelatedaccountstask

Responses

CodeDescriptionData Type
202Uncorrelated Accounts TaskLoaduncorrelatedaccountstask
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: multipart/form-data
  • Accept: application/json

Example

$Id = "75dbec1ebe154d5785da27b95e1dd5d7" # String | Source Id
$File = # System.IO.FileInfo | (optional)

# Process uncorrelated accounts

try {
Import-UncorrelatedAccountsV1 -Id $Id

# Below is a request that includes all optional parameters
# Import-UncorrelatedAccountsV1 -Id $Id -File $File
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Import-UncorrelatedAccountsV1"
Write-Host $_.ErrorDetails
}

[Back to top]

list-password-policy-holders-on-source-v1

This API can be used to get Password Policy in IdentityNow for the specified Source. Source must support PASSWORD feature.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
QueryOffsetInt32(optional) (default to 0)Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information.
QueryLimitInt32(optional) (default to 250)Max number of results to return. See V3 API Standard Collection Parameters for more information.
QueryCountBoolean(optional) (default to $false)If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information.

Return type

PasswordpolicyholdersdtoInner[]

Responses

CodeDescriptionData Type
200Password PoliciesPasswordpolicyholdersdtoInner[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$Offset = 0 # Int32 | Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to 0)
$Limit = 250 # Int32 | Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to 250)
$Count = $true # Boolean | If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored. Since requesting a total count can have a performance impact, it is recommended not to send **count=true** if that value will not be used. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to $false)

# Get Password Policy for source

try {
Get-PasswordPolicyHoldersOnSourceV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-PasswordPolicyHoldersOnSourceV1 -SourceId $SourceId -Offset $Offset -Limit $Limit -Count $Count
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-PasswordPolicyHoldersOnSourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

list-provisioning-policies-v1

This end-point lists all the ProvisioningPolicies in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
QueryOffsetInt64(optional) (default to 0)Offset Integer specifying the offset of the first result from the beginning of the collection. The standard syntax described in V3 API Standard Collection Parameters. The offset value is record-based, not page-based, and the index starts at 0.
QueryLimitInt64(optional) (default to 250)Limit Integer specifying the maximum number of records to return in a single API call. The standard syntax described in V3 API Standard Collection Parameters. If it is not specified, a default limit is used.

Return type

Provisioningpolicydto[]

Responses

CodeDescriptionData Type
200List of ProvisioningPolicyDto objectsProvisioningpolicydto[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id
$Offset = 0 # Int64 | Offset Integer specifying the offset of the first result from the beginning of the collection. The standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#paginating-results). The offset value is record-based, not page-based, and the index starts at 0. (optional) (default to 0)
$Limit = 250 # Int64 | Limit Integer specifying the maximum number of records to return in a single API call. The standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#paginating-results). If it is not specified, a default limit is used. (optional) (default to 250)

# Lists provisioningpolicies

try {
Get-ProvisioningPoliciesV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Get-ProvisioningPoliciesV1 -SourceId $SourceId -Offset $Offset -Limit $Limit
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-ProvisioningPoliciesV1"
Write-Host $_.ErrorDetails
}

[Back to top]

list-provisioning-policies-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This end-point lists all the ProvisioningPolicies in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
QueryFiltersString(optional)Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: subtypeId: eq usageType: eq
QueryOffsetInt64(optional) (default to 0)Offset Integer specifying the offset of the first result from the beginning of the collection. The standard syntax described in V3 API Standard Collection Parameters. The offset value is record-based, not page-based, and the index starts at 0.
QueryLimitInt64(optional) (default to 250)Limit Integer specifying the maximum number of records to return in a single API call. The standard syntax described in V3 API Standard Collection Parameters. If it is not specified, a default limit is used.

Return type

Provisioningpolicydtov2[]

Responses

CodeDescriptionData Type
200List of ProvisioningPolicyDto objectsProvisioningpolicydtov2[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Filters = 'subtypeId eq "6d28b7c1-620c-49c6-b6d5-cbf81eb4b5fa"' # String | Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: **subtypeId**: *eq* **usageType**: *eq* (optional)
$Offset = 0 # Int64 | Offset Integer specifying the offset of the first result from the beginning of the collection. The standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#paginating-results). The offset value is record-based, not page-based, and the index starts at 0. (optional) (default to 0)
$Limit = 250 # Int64 | Limit Integer specifying the maximum number of records to return in a single API call. The standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#paginating-results). If it is not specified, a default limit is used. (optional) (default to 250)

# Lists Provisioning Policies

try {
Get-ProvisioningPoliciesV2 -SourceId $SourceId -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Get-ProvisioningPoliciesV2 -SourceId $SourceId -XSailPointExperimental $XSailPointExperimental -Filters $Filters -Offset $Offset -Limit $Limit
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-ProvisioningPoliciesV2"
Write-Host $_.ErrorDetails
}

[Back to top]

list-sources-v1

This end-point lists all the sources in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
QueryLimitInt32(optional) (default to 250)Max number of results to return. See V3 API Standard Collection Parameters for more information.
QueryOffsetInt32(optional) (default to 0)Offset into the full result set. Usually specified with limit to paginate through the results. See V3 API Standard Collection Parameters for more information.
QueryCountBoolean(optional) (default to $false)If true it will populate the X-Total-Count response header with the number of results that would be returned if limit and offset were ignored. Since requesting a total count can have a performance impact, it is recommended not to send count=true if that value will not be used. See V3 API Standard Collection Parameters for more information.
QueryFiltersString(optional)Filter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: id: eq, in, ge, gt, le, lt, ne, isnull, sw name: co, eq, in, sw, ge, gt, ne, isnull type: eq, in, ge, gt, ne, isnull, sw owner.id: eq, in, ge, gt, le, lt, ne, isnull, sw features: ca, co created: eq, ge, gt, in, le, lt, ne, isnull, sw modified: eq, ge, gt, in, le, lt, ne, isnull, sw managementWorkgroup.id: eq, ge, gt, in, le, lt, ne, isnull, sw description: eq, sw authoritative: eq, ne, isnull healthy: isnull status: eq, in, ge, gt, le, lt, ne, isnull, sw connectionType: eq, ge, gt, in, le, lt, ne, isnull, sw connectorName: eq, ge, gt, in, ne, isnull, sw category: co, eq, ge, gt, in, le, lt, ne, sw
QuerySortersString(optional)Sort results using the standard syntax described in V3 API Standard Collection Parameters Sorting is supported for the following fields: type, created, modified, name, owner.name, healthy, status, id, description, owner.id, accountCorrelationConfig.id, accountCorrelationConfig.name, managerCorrelationRule.type, managerCorrelationRule.id, managerCorrelationRule.name, authoritative, managementWorkgroup.id, connectorName, connectionType
QueryForSubadminString(optional)Filter the returned list of sources for the identity specified by the parameter, which is the id of an identity with the role SOURCE_SUBADMIN. By convention, the value me indicates the identity id of the current user. Subadmins may only view Sources which they are able to administer; all other Sources will be filtered out when this parameter is set. If the current user is a SOURCE_SUBADMIN but fails to pass a valid value for this parameter, a 403 Forbidden is returned.
QueryIncludeIDNSourceBoolean(optional) (default to $false)Include the IdentityNow source in the response.

Return type

Source[]

Responses

CodeDescriptionData Type
200List of Source objectsSource[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Limit = 250 # Int32 | Max number of results to return. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to 250)
$Offset = 0 # Int32 | Offset into the full result set. Usually specified with *limit* to paginate through the results. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to 0)
$Count = $true # Boolean | If *true* it will populate the *X-Total-Count* response header with the number of results that would be returned if *limit* and *offset* were ignored. Since requesting a total count can have a performance impact, it is recommended not to send **count=true** if that value will not be used. See [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters) for more information. (optional) (default to $false)
$Filters = 'name eq "Employees"' # String | Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: **id**: *eq, in, ge, gt, le, lt, ne, isnull, sw* **name**: *co, eq, in, sw, ge, gt, ne, isnull* **type**: *eq, in, ge, gt, ne, isnull, sw* **owner.id**: *eq, in, ge, gt, le, lt, ne, isnull, sw* **features**: *ca, co* **created**: *eq, ge, gt, in, le, lt, ne, isnull, sw* **modified**: *eq, ge, gt, in, le, lt, ne, isnull, sw* **managementWorkgroup.id**: *eq, ge, gt, in, le, lt, ne, isnull, sw* **description**: *eq, sw* **authoritative**: *eq, ne, isnull* **healthy**: *isnull* **status**: *eq, in, ge, gt, le, lt, ne, isnull, sw* **connectionType**: *eq, ge, gt, in, le, lt, ne, isnull, sw* **connectorName**: *eq, ge, gt, in, ne, isnull, sw* **category**: *co, eq, ge, gt, in, le, lt, ne, sw* (optional)
$Sorters = "name" # String | Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: **type, created, modified, name, owner.name, healthy, status, id, description, owner.id, accountCorrelationConfig.id, accountCorrelationConfig.name, managerCorrelationRule.type, managerCorrelationRule.id, managerCorrelationRule.name, authoritative, managementWorkgroup.id, connectorName, connectionType** (optional)
$ForSubadmin = "name" # String | Filter the returned list of sources for the identity specified by the parameter, which is the id of an identity with the role SOURCE_SUBADMIN. By convention, the value **me** indicates the identity id of the current user. Subadmins may only view Sources which they are able to administer; all other Sources will be filtered out when this parameter is set. If the current user is a SOURCE_SUBADMIN but fails to pass a valid value for this parameter, a 403 Forbidden is returned. (optional)
$IncludeIDNSource = $true # Boolean | Include the IdentityNow source in the response. (optional) (default to $false)

# Lists all sources in identitynow.

try {
Get-SourcesV1

# Below is a request that includes all optional parameters
# Get-SourcesV1 -Limit $Limit -Offset $Offset -Count $Count -Filters $Filters -Sorters $Sorters -ForSubadmin $ForSubadmin -IncludeIDNSource $IncludeIDNSource
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Get-SourcesV1"
Write-Host $_.ErrorDetails
}

[Back to top]

ping-cluster-v1

This endpoint validates that the cluster being used by the source is reachable from IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe ID of the Source

Return type

Statusresponse

Responses

CodeDescriptionData Type
200The result of pinging connection with the source connector.Statusresponse
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "cef3ee201db947c5912551015ba0c679" # String | The ID of the Source

# Ping cluster for source connector

try {
Ping-ClusterV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Ping-ClusterV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Ping-ClusterV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-correlation-config-v1

Replaces the correlation configuration for the source specified by the given ID with the configuration provided in the request body.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe source id
BodyCorrelationconfigCorrelationconfigTrue

Return type

Correlationconfig

Responses

CodeDescriptionData Type
200Updated correlation configuration for a sourceCorrelationconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | The source id
$Correlationconfig = @""@

# Update source correlation configuration

try {
$Result = ConvertFrom-JsonToCorrelationconfig -Json $Correlationconfig
Send-CorrelationConfigV1 -Id $Id -Correlationconfig $Result

# Below is a request that includes all optional parameters
# Send-CorrelationConfigV1 -Id $Id -Correlationconfig $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-CorrelationConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-native-change-detection-config-v1

Replaces the native change detection configuration for the source specified by the given ID with the configuration provided in the request body.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe source id
BodyNativechangedetectionconfigNativechangedetectionconfigTrue

Return type

Nativechangedetectionconfig

Responses

CodeDescriptionData Type
200Updated native change detection configuration for a sourceNativechangedetectionconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The source id
$Nativechangedetectionconfig = @""@

# Update native change detection configuration

try {
$Result = ConvertFrom-JsonToNativechangedetectionconfig -Json $Nativechangedetectionconfig
Send-NativeChangeDetectionConfigV1 -SourceId $SourceId -Nativechangedetectionconfig $Result

# Below is a request that includes all optional parameters
# Send-NativeChangeDetectionConfigV1 -SourceId $SourceId -Nativechangedetectionconfig $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-NativeChangeDetectionConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-provisioning-policy-v1

This end-point updates the provisioning policy with the specified usage on the specified source in IdentityNow. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathUsageTypeUsagetypeTrueThe type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.
BodyProvisioningpolicydtoProvisioningpolicydtoTrue

Return type

Provisioningpolicydto

Responses

CodeDescriptionData Type
200The ProvisioningPolicyDto was successfully replaced.Provisioningpolicydto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$UsageType = "CREATE" # Usagetype | The type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.
$Provisioningpolicydto = @""@

# Update provisioning policy by usagetype

try {
$Result = ConvertFrom-JsonToProvisioningpolicydto -Json $Provisioningpolicydto
Send-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType -Provisioningpolicydto $Result

# Below is a request that includes all optional parameters
# Send-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType -Provisioningpolicydto $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-ProvisioningPolicyV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-provisioning-policy-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This end-point updates the provisioning policy with the specified ID on the specified source in Identity Security Cloud. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source ID.
PathIdStringTrueThe provisioning policy ID.
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
BodyProvisioningpolicydtov2Provisioningpolicydtov2True

Return type

Provisioningpolicydtov2

Responses

CodeDescriptionData Type
200The ProvisioningPolicyDto was successfully replaced.Provisioningpolicydtov2
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source ID.
$Id = "f5dd23fe-3414-42b7-bb1c-869400ad7a10" # String | The provisioning policy ID.
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Provisioningpolicydtov2 = @""@

# Update provisioning policy by ID

try {
$Result = ConvertFrom-JsonToProvisioningpolicydtov2 -Json $Provisioningpolicydtov2
Send-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental -Provisioningpolicydtov2 $Result

# Below is a request that includes all optional parameters
# Send-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental -Provisioningpolicydtov2 $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-ProvisioningPolicyV2"
Write-Host $_.ErrorDetails
}

[Back to top]

put-source-attr-sync-config-v1

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

Replaces the attribute synchronization configuration for the source specified by the given ID with the configuration provided in the request body. Only the "enabled" field of the values in the "attributes" array is mutable. Attempting to change other attributes or add new values to the "attributes" array will result in an error.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
BodyAttrsyncsourceconfigAttrsyncsourceconfigTrue

Return type

Attrsyncsourceconfig

Responses

CodeDescriptionData Type
200Updated attribute synchronization configuration for a sourceAttrsyncsourceconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | The source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Attrsyncsourceconfig = @""@

# Update attribute sync config

try {
$Result = ConvertFrom-JsonToAttrsyncsourceconfig -Json $Attrsyncsourceconfig
Send-SourceAttrSyncConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental -Attrsyncsourceconfig $Result

# Below is a request that includes all optional parameters
# Send-SourceAttrSyncConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental -Attrsyncsourceconfig $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-SourceAttrSyncConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-source-schema-v1

This API will completely replace an existing Schema with the submitted payload. Some fields of the Schema cannot be updated. These fields are listed below.

  • id
  • name
  • created
  • modified

Any attempt to modify these fields will result in an error response with a status code of 400.

id must remain in the request body, but it cannot be changed. If id is omitted from the request body, the result will be a 400 error.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathSchemaIdStringTrueThe Schema id.
BodySchemaSchemaTrue

Return type

Schema

Responses

CodeDescriptionData Type
200The Schema was successfully replaced.Schema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$SchemaId = "2c9180835d191a86015d28455b4a2329" # String | The Schema id.
$Schema = @""@

# Update source schema (full)

try {
$Result = ConvertFrom-JsonToSchema -Json $Schema
Send-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId -Schema $Result

# Below is a request that includes all optional parameters
# Send-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId -Schema $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-SourceSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

put-source-v1

Use this API to update a source in Identity Security Cloud (ISC), using a full object representation. This means that when you use this API, it completely replaces the existing source configuration.

These fields are immutable, so they cannot be changed:

  • id
  • type
  • authoritative
  • connector
  • connectorClass
  • passwordPolicies

Attempts to modify these fields will result in a 400 error.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource ID.
BodySourceSourceTrue

Return type

Source

Responses

CodeDescriptionData Type
200Updated Source object. Any passwords will only show the the encrypted cipher-text so that they aren't decryptable in Identity Security Cloud (ISC) cloud-based services, per ISC security design.Source
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | Source ID.
$Source = @""@

# Update source (full)

try {
$Result = ConvertFrom-JsonToSource -Json $Source
Send-SourceV1 -Id $Id -Source $Result

# Below is a request that includes all optional parameters
# Send-SourceV1 -Id $Id -Source $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Send-SourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

search-resource-objects-v1

Retrieves a sample of data returned from account and group aggregation requests.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe ID of the Source
BodyResourceobjectsrequestResourceobjectsrequestTrue

Return type

Resourceobjectsresponse

Responses

CodeDescriptionData Type
200List of resource objects that was fetched from the source connector.Resourceobjectsresponse
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "cef3ee201db947c5912551015ba0c679" # String | The ID of the Source
$Resourceobjectsrequest = @""@

# Peek source connector's resource objects

try {
$Result = ConvertFrom-JsonToResourceobjectsrequest -Json $Resourceobjectsrequest
Search-ResourceObjectsV1 -SourceId $SourceId -Resourceobjectsrequest $Result

# Below is a request that includes all optional parameters
# Search-ResourceObjectsV1 -SourceId $SourceId -Resourceobjectsrequest $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Search-ResourceObjectsV1"
Write-Host $_.ErrorDetails
}

[Back to top]

sync-attributes-for-source-v1

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This end-point performs attribute synchronization for a selected source.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.

Return type

Sourcesyncjob

Responses

CodeDescriptionData Type
202A Source Sync jobSourcesyncjob
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$Id = "MyId" # String | The Source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")

# Synchronize single source attributes.

try {
Sync-AttributesForSourceV1 -Id $Id -XSailPointExperimental $XSailPointExperimental

# Below is a request that includes all optional parameters
# Sync-AttributesForSourceV1 -Id $Id -XSailPointExperimental $XSailPointExperimental
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Sync-AttributesForSourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]

test-source-configuration-v1

This endpoint performs a more detailed validation of the source''s configuration that can take longer than the lighter weight credential validation performed by the checkConnection API.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe ID of the Source

Return type

Statusresponse

Responses

CodeDescriptionData Type
200The result of testing source connector configuration with response from it.Statusresponse
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "cef3ee201db947c5912551015ba0c679" # String | The ID of the Source

# Test configuration for source connector

try {
Test-SourceConfigurationV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Test-SourceConfigurationV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Test-SourceConfigurationV1"
Write-Host $_.ErrorDetails
}

[Back to top]

test-source-connection-v1

This endpoint validates that the configured credentials are valid and will properly authenticate with the source identified by the sourceId path parameter.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe ID of the Source.

Return type

Statusresponse

Responses

CodeDescriptionData Type
200The result of checking connection to the source connector with response from it.Statusresponse
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

$SourceId = "cef3ee201db947c5912551015ba0c679" # String | The ID of the Source.

# Check connection for source connector.

try {
Test-SourceConnectionV1 -SourceId $SourceId

# Below is a request that includes all optional parameters
# Test-SourceConnectionV1 -SourceId $SourceId
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Test-SourceConnectionV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-account-deletion-approval-config-v1

Updates the approval configuration for deleting human accounts for a specific source, identified by source ID. This endpoint allows administrators to modify settings such as whether approval is required, who the approvers are, and other approval-related options. The update is performed using a JSON Patch payload, and the response returns the updated AccountDeleteConfigDto object reflecting the new approval workflow configuration.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueHuman account source ID.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the object.

Return type

Accountdeleteconfigdto

Responses

CodeDescriptionData Type
200This response indicates the PATCH operation succeeded and the API returns the updated AccountDeleteConfigDto object.Accountdeleteconfigdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "00eebcf881994e419d72e757fd30dc0e" # String | Human account source ID.
$Jsonpatchoperation = @""@ # Jsonpatchoperation[] | The JSONPatch payload used to update the object.


# Human Account Deletion Approval Config

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-AccountDeletionApprovalConfigV1 -SourceId $SourceId -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-AccountDeletionApprovalConfigV1 -SourceId $SourceId -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-AccountDeletionApprovalConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-machine-account-deletion-approval-config-v1

Use this endpoint to update the machine account deletion approval configuration for a specific source. The update is performed using a JSON Patch payload, which allows partial modifications to the approval config. This operation is typically used to change approval requirements, approvers, or comments settings for machine account deletion. The endpoint expects the source ID as a path parameter and a valid JSON Patch array in the request body.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTruemachine account source ID.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the object.

Return type

Accountdeleteconfigdto

Responses

CodeDescriptionData Type
200This response indicates the PATCH operation succeeded and the API returns the updated AccountDeleteConfigDto object.Accountdeleteconfigdto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "00eebcf881994e419d72e757fd30dc0e" # String | machine account source ID.
$Jsonpatchoperation = @""@ # Jsonpatchoperation[] | The JSONPatch payload used to update the object.


# Machine Account Deletion Approval Config

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-MachineAccountDeletionApprovalConfigV1 -SourceId $SourceId -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-MachineAccountDeletionApprovalConfigV1 -SourceId $SourceId -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-MachineAccountDeletionApprovalConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-password-policy-holders-v1

This API can be used to set up or update Password Policy in IdentityNow for the specified Source. Source must support PASSWORD feature.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id
BodyPasswordpolicyholdersdtoInner[]PasswordpolicyholdersdtoInnerTrue

Return type

PasswordpolicyholdersdtoInner[]

Responses

CodeDescriptionData Type
200Updated Password PoliciesPasswordpolicyholdersdtoInner[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$PasswordpolicyholdersdtoInner = @""@ # PasswordpolicyholdersdtoInner[] |


# Update password policy

try {
$Result = ConvertFrom-JsonToPasswordpolicyholdersdtoInner -Json $PasswordpolicyholdersdtoInner
Update-PasswordPolicyHoldersV1 -SourceId $SourceId -PasswordpolicyholdersdtoInner $Result

# Below is a request that includes all optional parameters
# Update-PasswordPolicyHoldersV1 -SourceId $SourceId -PasswordpolicyholdersdtoInner $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-PasswordPolicyHoldersV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-provisioning-policies-in-bulk-v1

This end-point updates a list of provisioning policies on the specified source in IdentityNow.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
BodyProvisioningpolicydto[]ProvisioningpolicydtoTrue

Return type

Provisioningpolicydto[]

Responses

CodeDescriptionData Type
200A list of the ProvisioningPolicyDto was successfully replaced.Provisioningpolicydto[]
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$Provisioningpolicydto = @""@ # Provisioningpolicydto[] |


# Bulk update provisioning policies

try {
$Result = ConvertFrom-JsonToProvisioningpolicydto -Json $Provisioningpolicydto
Update-ProvisioningPoliciesInBulkV1 -SourceId $SourceId -Provisioningpolicydto $Result

# Below is a request that includes all optional parameters
# Update-ProvisioningPoliciesInBulkV1 -SourceId $SourceId -Provisioningpolicydto $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-ProvisioningPoliciesInBulkV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-provisioning-policy-v1

This API selectively updates an existing Provisioning Policy using a JSONPatch payload. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathUsageTypeUsagetypeTrueThe type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the schema.

Return type

Provisioningpolicydto

Responses

CodeDescriptionData Type
200The ProvisioningPolicyDto was successfully updated.Provisioningpolicydto
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$UsageType = "CREATE" # Usagetype | The type of provisioning policy usage. In IdentityNow, a source can support various provisioning operations. For example, when a joiner is added to a source, this may trigger both CREATE and UPDATE provisioning operations. Each usage type is considered a provisioning policy. A source can have any number of these provisioning policies defined. These are the common usage types: CREATE - This usage type relates to 'Create Account Profile', the provisioning template for the account to be created. For example, this would be used for a joiner on a source. UPDATE - This usage type relates to 'Update Account Profile', the provisioning template for the 'Update' connector operations. For example, this would be used for an attribute sync on a source. ENABLE - This usage type relates to 'Enable Account Profile', the provisioning template for the account to be enabled. For example, this could be used for a joiner on a source once the joiner's account is created. DISABLE - This usage type relates to 'Disable Account Profile', the provisioning template for the account to be disabled. For example, this could be used when a leaver is removed temporarily from a source. You can use these four usage types for all your provisioning policy needs.
$Jsonpatchoperation = @"[{"op":"add","path":"/fields/0","value":{"name":"email","transform":{"type":"identityAttribute","attributes":{"name":"email"}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false}}]"@ # Jsonpatchoperation[] | The JSONPatch payload used to update the schema.


# Partial update of provisioning policy

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-ProvisioningPolicyV1 -SourceId $SourceId -UsageType $UsageType -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-ProvisioningPolicyV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-provisioning-policy-v2

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This API selectively updates an existing Provisioning Policy using a JSONPatch payload. Transforms can be used in the provisioning policy to create a new attribute that you only need during provisioning. Refer to Transforms in Provisioning Policies for more information.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathIdStringTrueThe provisioning policy ID.
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the schema.

Return type

Provisioningpolicydtov2

Responses

CodeDescriptionData Type
200The ProvisioningPolicyDtoV2 was successfully updated.Provisioningpolicydtov2
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$Id = "f5dd23fe-3414-42b7-bb1c-869400ad7a10" # String | The provisioning policy ID.
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Jsonpatchoperation = @"[{"op":"add","path":"/fields/0","value":{"name":"email","transform":{"type":"identityAttribute","attributes":{"name":"email"}},"attributes":{},"isRequired":false,"type":"string","isMultiValued":false}}]"@ # Jsonpatchoperation[] | The JSONPatch payload used to update the schema.


# Partial update of provisioning policy

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-ProvisioningPolicyV2 -SourceId $SourceId -Id $Id -XSailPointExperimental $XSailPointExperimental -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-ProvisioningPolicyV2"
Write-Host $_.ErrorDetails
}

[Back to top]

update-source-entitlement-request-config-v1

experimental

This API is currently in an experimental state. The API is subject to change based on feedback and further testing. You must include the X-SailPoint-Experimental header and set it to true to use this endpoint.

This API replaces the current entitlement request configuration for a source. This source-level configuration should apply for all the entitlements in the source.

Access request to any entitlements in the source should follow this configuration unless a separate entitlement-level configuration is defined.

  • During access request, this source-level entitlement request configuration overrides the global organization-level configuration.
  • However, the entitlement-level configuration (if defined) overrides this source-level configuration.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueThe Source id
XSailPointExperimentalStringTrue (default to "true")Use this header to enable this experimental API.
BodySourceentitlementrequestconfigSourceentitlementrequestconfigTrue

Return type

Sourceentitlementrequestconfig

Responses

CodeDescriptionData Type
200Source Entitlement Request Configuration Details.Sourceentitlementrequestconfig
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json
  • Accept: application/json

Example

$Id = "8c190e6787aa4ed9a90bd9d5344523fb" # String | The Source id
$XSailPointExperimental = "true" # String | Use this header to enable this experimental API. (default to "true")
$Sourceentitlementrequestconfig = @"{"accessRequestConfig":{"approvalSchemes":[]}}"@

# Update source entitlement request configuration

try {
$Result = ConvertFrom-JsonToSourceentitlementrequestconfig -Json $Sourceentitlementrequestconfig
Update-SourceEntitlementRequestConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental -Sourceentitlementrequestconfig $Result

# Below is a request that includes all optional parameters
# Update-SourceEntitlementRequestConfigV1 -Id $Id -XSailPointExperimental $XSailPointExperimental -Sourceentitlementrequestconfig $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-SourceEntitlementRequestConfigV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-source-schedule-v1

Use this API to selectively update an existing Schedule using a JSONPatch payload.

The following schedule fields are immutable and cannot be updated:

  • type

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathScheduleTypeStringTrueThe Schedule type.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the schedule.

Return type

Schedule3

Responses

CodeDescriptionData Type
200The Schedule was successfully updated.Schedule3
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$ScheduleType = "ACCOUNT_AGGREGATION" # String | The Schedule type.
$Jsonpatchoperation = @"[{"op":"replace","path":"/cronExpression","value":"0 0 6 * * ?"}]"@ # Jsonpatchoperation[] | The JSONPatch payload used to update the schedule.


# Update source schedule (partial)

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-SourceScheduleV1 -SourceId $SourceId -ScheduleType $ScheduleType -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-SourceScheduleV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-source-schema-v1

Use this API to selectively update an existing Schema using a JSONPatch payload.

The following schema fields are immutable and cannot be updated:

  • id
  • name
  • created
  • modified

To switch an account attribute to a group entitlement, you need to have the following in place:

  • isEntitlement: true
  • Must define a schema for the group and add it to the source before updating the isGroup flag. For example, here is the group account attribute referencing a schema that defines the group:
{
"name": "groups",
"type": "STRING",
"schema": {
"type": "CONNECTOR_SCHEMA",
"id": "2c9180887671ff8c01767b4671fc7d60",
"name": "group"
},
"description": "The groups, roles etc. that reference account group objects",
"isMulti": true,
"isEntitlement": true,
"isGroup": true
}

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathSourceIdStringTrueThe Source id.
PathSchemaIdStringTrueThe Schema id.
BodyJsonpatchoperation[]JsonpatchoperationTrueThe JSONPatch payload used to update the schema.

Return type

Schema

Responses

CodeDescriptionData Type
200The Schema was successfully updated.Schema
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$SourceId = "2c9180835d191a86015d28455b4a2329" # String | The Source id.
$SchemaId = "2c9180835d191a86015d28455b4a2329" # String | The Schema id.
$Jsonpatchoperation = @"[{"op":"add","path":"/attributes/-","value":{"name":"location","type":"STRING","schema":null,"description":"Employee location","isMulti":false,"isEntitlement":false,"isGroup":false}}]"@ # Jsonpatchoperation[] | The JSONPatch payload used to update the schema.


# Update source schema (partial)

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-SourceSchemaV1 -SourceId $SourceId -SchemaId $SchemaId -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-SourceSchemaV1"
Write-Host $_.ErrorDetails
}

[Back to top]

update-source-v1

Use this API to partially update a source in Identity Security Cloud (ISC), using a list of patch operations according to the JSON Patch standard.

These fields are immutable, so they cannot be changed:

  • id
  • type
  • authoritative
  • created
  • modified
  • connector
  • connectorClass
  • passwordPolicies

Attempts to modify these fields will result in a 400 error.

API Spec

Parameters

Param TypeNameData TypeRequiredDescription
PathIdStringTrueSource ID.
BodyJsonpatchoperation[]JsonpatchoperationTrueA list of account update operations according to the JSON Patch standard. Any password changes are submitted as plain-text and encrypted upon receipt in Identity Security Cloud (ISC).

Return type

Source

Responses

CodeDescriptionData Type
200Updated Source object. Any passwords will only show the the encrypted cipher-text so that they aren't decryptable in Identity Security Cloud (ISC) cloud-based services, per ISC security design.Source
400Client Error - Returned if the request body is invalid.Errorresponsedto
401Unauthorized - Returned if there is no authorization header, or if the JWT token is expired.ListSourcesV1401Response
403Forbidden - Returned if the user you are running as, doesn't have access to this end-point.Errorresponsedto
404Not Found - returned if the request URL refers to a resource or object that does not existErrorresponsedto
429Too Many Requests - Returned in response to too many requests in a given period of time - rate limited. The Retry-After header in the response includes how long to wait before trying again.ListSourcesV1429Response
500Internal Server Error - Returned if there is an unexpected error.Errorresponsedto

HTTP request headers

  • Content-Type: application/json-patch+json
  • Accept: application/json

Example

$Id = "2c9180835d191a86015d28455b4a2329" # String | Source ID.
$Jsonpatchoperation = @"[{"op":"replace","path":"/description","value":"new description"}]"@ # Jsonpatchoperation[] | A list of account update operations according to the [JSON Patch](https://tools.ietf.org/html/rfc6902) standard. Any password changes are submitted as plain-text and encrypted upon receipt in Identity Security Cloud (ISC).


# Update source (partial)

try {
$Result = ConvertFrom-JsonToJsonpatchoperation -Json $Jsonpatchoperation
Update-SourceV1 -Id $Id -Jsonpatchoperation $Result

# Below is a request that includes all optional parameters
# Update-SourceV1 -Id $Id -Jsonpatchoperation $Result
} catch {
Write-Host $_.Exception.Response.StatusCode.value__ "Exception occurred when calling Update-SourceV1"
Write-Host $_.ErrorDetails
}

[Back to top]