Skip to main content

IntelligenceApi

Read-only HTTP API that returns the Intelligence (identity context) for SecOps enrichment use cases (SIEM/SOAR connectors, MCP, browser extension). Backed by Atlas internal-REST calls to MICE, Shelby List Accounts, SDS Search, IDA-outliers, and identity-history.

All URIs are relative to https://sailpoint.api.identitynow.com

MethodHTTP requestDescription
get-identity-intelligence-v1GET /intelligence/v1/identitiesGet identity by filter
get-intel-identity-access-item-history-v1GET /intelligence/v1/identities/{id}/access-history/access-itemsList identity access item history
get-intel-identity-accounts-v1GET /intelligence/v1/identities/{id}/accountsList identity accounts
get-intel-identity-certification-history-v1GET /intelligence/v1/identities/{id}/access-history/certificationsList identity certification history
get-intel-identity-rare-access-v1GET /intelligence/v1/identities/{id}/outliers/rare-accessList identity rare access

get-identity-intelligence-v1

Get identity by filter Requires tenant license idn:response-and-remediation.

Resolves exactly one identity by SCIM-style filters expression and returns the Intelligence envelope. Supported queryable fields are id and email only. The response embeds the first page of accounts, rare access, access-history access items, and access-history certifications. Paged slices include a next link only when more results exist. The privilegedAccess slice contains the full result and is not paged. The outliers slice is omitted when the tenant lacks the IDA-outliers license.

API Spec

Parameters

NameTypeDescriptionNotes
filtersstringFilter results using the standard syntax described in V3 API Standard Collection Parameters Filtering is supported for the following fields and operators: id: eq email: eq[default to undefined]

Return type

Intelidentityaggregate

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

import { IntelligenceApi } from 'sailpoint-api-client';
import { Configuration } from 'sailpoint-api-client';

const configuration = new Configuration();
const apiInstance = new IntelligenceApi(configuration);
const filters: string = id eq "ef38f94347e94562b5bb8424a56397d8"; // Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: **id**: *eq* **email**: *eq*
const result = await apiInstance.getIdentityIntelligenceV1({ filters: filters });
console.log(result);

[Back to top]

get-intel-identity-access-item-history-v1

List identity access item history Continuation endpoint for the parent response's accessHistory.accessItems.next link. Returns one page of access-item history events for the supplied limit and offset values. Unsupported event types and per-record decode failures are dropped server-side. Requires tenant license idn:response-and-remediation.

API Spec

Parameters

NameTypeDescriptionNotes
idstringNon-empty identity id path segment for Intelligence sub-resources.[default to undefined]
limitnumberPage size. Defaults to 250; values above 250 are rejected with 400.[optional] [default to 250]
offsetnumberZero-based page offset. Defaults to 0.[optional] [default to 0]

Return type

Array<Intelaccessitemhistoryevent>

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

import { IntelligenceApi } from 'sailpoint-api-client';
import { Configuration } from 'sailpoint-api-client';

const configuration = new Configuration();
const apiInstance = new IntelligenceApi(configuration);
const id: string = ef38f94347e94562b5bb8424a56397d8; // Non-empty identity id path segment for Intelligence sub-resources.
const limit: number = 250; // Page size. Defaults to 250; values above 250 are rejected with 400. (optional)
const offset: number = 0; // Zero-based page offset. Defaults to 0. (optional)
const result = await apiInstance.getIntelIdentityAccessItemHistoryV1({ id: id });
console.log(result);

[Back to top]

get-intel-identity-accounts-v1

List identity accounts Continuation endpoint for the parent response's accounts.next link. Returns one page of account rows for the supplied limit and offset values. Requires tenant license idn:response-and-remediation.

API Spec

Parameters

NameTypeDescriptionNotes
idstringNon-empty identity id path segment for Intelligence sub-resources.[default to undefined]
limitnumberPage size. Defaults to 250; values above 250 are rejected with 400.[optional] [default to 250]
offsetnumberZero-based page offset. Defaults to 0.[optional] [default to 0]

Return type

Array<Intelaccessaccountwire>

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

import { IntelligenceApi } from 'sailpoint-api-client';
import { Configuration } from 'sailpoint-api-client';

const configuration = new Configuration();
const apiInstance = new IntelligenceApi(configuration);
const id: string = ef38f94347e94562b5bb8424a56397d8; // Non-empty identity id path segment for Intelligence sub-resources.
const limit: number = 250; // Page size. Defaults to 250; values above 250 are rejected with 400. (optional)
const offset: number = 0; // Zero-based page offset. Defaults to 0. (optional)
const result = await apiInstance.getIntelIdentityAccountsV1({ id: id });
console.log(result);

[Back to top]

get-intel-identity-certification-history-v1

List identity certification history Continuation endpoint for the parent response's accessHistory.certifications.next link. Returns one page of certification history events for the supplied limit and offset values. Per-record decode failures are dropped server-side. Requires tenant license idn:response-and-remediation.

API Spec

Parameters

NameTypeDescriptionNotes
idstringNon-empty identity id path segment for Intelligence sub-resources.[default to undefined]
limitnumberPage size. Defaults to 250; values above 250 are rejected with 400.[optional] [default to 250]
offsetnumberZero-based page offset. Defaults to 0.[optional] [default to 0]

Return type

Array<Intelcertificationhistoryevent>

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

import { IntelligenceApi } from 'sailpoint-api-client';
import { Configuration } from 'sailpoint-api-client';

const configuration = new Configuration();
const apiInstance = new IntelligenceApi(configuration);
const id: string = ef38f94347e94562b5bb8424a56397d8; // Non-empty identity id path segment for Intelligence sub-resources.
const limit: number = 250; // Page size. Defaults to 250; values above 250 are rejected with 400. (optional)
const offset: number = 0; // Zero-based page offset. Defaults to 0. (optional)
const result = await apiInstance.getIntelIdentityCertificationHistoryV1({ id: id });
console.log(result);

[Back to top]

get-intel-identity-rare-access-v1

List identity rare access Continuation endpoint for the parent response's outliers.rareAccess.next link. Resolves the identity's first outlier, then returns one page of rare access items for the supplied limit and offset values. An identity with no outlier returns an empty array. Requires tenant license idn:response-and-remediation and the IDA-outliers license.

API Spec

Parameters

NameTypeDescriptionNotes
idstringNon-empty identity id path segment for Intelligence sub-resources.[default to undefined]
limitnumberPage size. Defaults to 250; values above 250 are rejected with 400.[optional] [default to 250]
offsetnumberZero-based page offset. Defaults to 0.[optional] [default to 0]

Return type

Array<Inteloutlieraccessitem>

HTTP request headers

  • Content-Type: Not defined
  • Accept: application/json

Example

import { IntelligenceApi } from 'sailpoint-api-client';
import { Configuration } from 'sailpoint-api-client';

const configuration = new Configuration();
const apiInstance = new IntelligenceApi(configuration);
const id: string = ef38f94347e94562b5bb8424a56397d8; // Non-empty identity id path segment for Intelligence sub-resources.
const limit: number = 250; // Page size. Defaults to 250; values above 250 are rejected with 400. (optional)
const offset: number = 0; // Zero-based page offset. Defaults to 0. (optional)
const result = await apiInstance.getIntelIdentityRareAccessV1({ id: id });
console.log(result);

[Back to top]