IDHub API (1.0.0)
Download OpenAPI specification:Download
Welcome to the Developer Guide! Empowering developers with comprehensive resources and tools to seamlessly integrate IDhub in your applications.
This section guides users to use endpoints in IDHub for tasks such as searching the catalog, adding items to a cart, and submitting access requests. It emphasizes the use of filters and specific endpoints for request details and submission.
Search
This Endpoint allows you to search the catalog using the display name of the item which contains the search keyword. You can further narrow down your search using the relevanceFilter, collection and tags.
Authorizations:
query Parameters
keyword | string This is the search keyword used to get the response. |
relevanceFilter | string If you want to further filter the response using relevant filter, then you need to relevanceFilter value in the Query parameter. One of the relevanceFilter can be "recentlyAdded" |
collection | string Get specific catalog items using the filter collection. For entitlement, specify collection as Entitlement, for roles it would be "Roles", for users it would be "Users", for service request it would be "ServiceRequest" and for application it would be "TargetSystem" |
tag | string If you want to further filter the response using tag filter, then you need to tag value in the Query parameter. Tag filter examples can be "Finance", "HR" etc. |
Responses
Response samples
- 200
[- {
- "homeAddressCountry": "US",
- "lastName": "King",
- "displayName": "Aaron King",
- "jobTitle": "Inside Sales Representative",
- "accessList": {
- "applicationCount": 8,
- "entitlementCount": 8,
- "roles": {
- "performer": "jerome",
- "riskLevel": "low",
- "displayName": "All Employees",
- "searchTags": "All Employees",
- "description": "This Role is assigned to all Employees.",
- "rule": "{\"$and\":[{\"status\":\"Active\"},{\"department\":{\"$nin\":[\"CO\"]}}]}",
- "isCertifiable": true,
- "collection": "Role",
- "workflowRequestFormId": "88478478abjkhk9",
- "createdOn": "2022-12-30T15:28:23.827Z",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "IDM": "IDE",
- "roleOwnerLogin": "samantha",
- "isRequestable": true,
- "name": "All Employees",
- "disabled": false,
- "ruleForm": "{\"$and\":[{\"attribute\":\"status\",\"condition\":\"equals\",\"value\":\"Active\",\"options\":[\"Active\"]},{\"attribute\":\"department\",\"condition\":\"notin\",\"value\":[\"CO\"],\"options\":[\"CO\"]}]}",
- "_id": "63af039793ccdf675cc7aa10",
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "approvalWorkflow": "Auto Role Approval"
}, - "applications": {
- "entitlements": {
- "performer": "Manual Fulfiller",
- "riskLevel": "low",
- "targetSystemName": "ADP",
- "ITOwner": "michael",
- "displayName": "ADP Standard User",
- "searchTags": "All Employees, HR",
- "description": "View and manage your HR account.",
- "collection": "Entitlement",
- "createdOn": "2022-12-30T12:06:15.174Z",
- "approvalWorkflowDisplayName": "Manager and BO Grant and Auto Revoke",
- "IDM": "IDE",
- "isRequestable": true,
- "name": "ADP Standard User",
- "disabled": false,
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "approvalWorkflow": "Manager and BO Grant and Auto Revoke",
- "businessOwner": "liz",
- "targetSystemDisplayName": "ADP"
}, - "performer": "Manual Fulfiller",
- "riskLevel": "low",
- "ITOwner": "michael",
- "displayName": "ADP",
- "integrationLevel": "Disconnected",
- "searchTags": "All Employees, HR",
- "description": "HR and Payroll Use",
- "collection": "TargetSystem",
- "createdOn": "2022-12-30T12:06:15.145Z",
- "trustedReconciliation": false,
- "logoURL": "Logo.files/63aed43793ccdf675cc58246/binary",
- "approvalWorkflowDisplayName": "Manager Grant and Auto Revoke",
- "schedule": {
- "repeat": "Do not repeat"
}, - "IDM": "IDE",
- "form": {
- "isRequired": true,
- "matchingAttribute": "firstName",
- "syncDirection": "no-sync",
- "dataType": "string",
- "isReconKey": false,
- "name": "First Name",
- "isAccountName": false,
- "isMultiValue": false
}, - "isRequestable": true,
- "name": "ADP",
- "disabled": false,
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "approvalWorkflow": "Manager Grant and Auto Revoke",
- "businessOwner": "liz"
}
}, - "login": "aaron",
- "createdOn": "2022-12-30T11:12:19.430Z",
- "employeeNumber": "employeeNumber",
- "IDM": "IDE",
- "homeAddressState": "Illinois",
- "officeAddressCity": "Schaumburg",
- "homeAddressCity": "Arlington Heights",
- "provisionedDate": "11-11-2022",
- "id": {
- "$oid": "63aec79393ccdf675cc4ccf4"
}, - "department": "Sales",
- "managerLogin": "spencer",
- "homeAddressZipcode": 60005,
- "createDate": "11-11-2022",
- "officeAddressCountry": "US",
- "organizationName": "I Am Sath",
- "homeAddressLine2": "Suite 52",
- "homeAddressLine1": "2862 Derek Drive",
- "managerDisplayName": "Spencer Hunter",
- "collection": "User",
- "logoURL": "Logo.files/63aec79393ccdf675cc4ccf4/binary",
- "firstName": "Aaron",
- "officeAddressZipcode": 60175,
- "phoneNumber": "847-392-2610",
- "officeAddressLine2": "H.No. 44AE",
- "location": "United States",
- "officeAddressLine1": "2468 Hiddenview Drive",
- "userType": "Employee",
- "_id": "63aec79393ccdf675cc4ccf4",
- "officeAddressState": "IL",
- "status": "Active"
}
]
Fetch by ID
This Endpoint will give you the details of a Request by ID
Authorizations:
path Parameters
id required | string id of the request object that you want to fetch |
Responses
Response samples
- 200
[- {
- "_id": {
- "$oid": "6565b512425c8055c059d598"
}, - "IDM": "IDE",
- "_etag": {
- "$oid": "6565b54ad87a5a00075e6f76"
}, - "collection": "UserRequest",
- "createDate": "2023-11-28T09:39:10.919Z",
- "history": {
- "diff": {
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": {
- "$oid": "63aee2a293ccdf675cc61f1e"
}, - "name": "Amazon Web Services"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "newtestr",
- "reason": "submitting role request",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "roletag",
- "workflowRequestFormId": "d4085akgk"
}, - "type": "create"
}, - "status": "Waiting for Approval"
}, - "snapshot": {
- "IDM": "IDE",
- "_id": "6565b512425c8055c059d598",
- "collection": "UserRequest",
- "createDate": "2023-11-28T09:39:10.919Z",
- "justification": "submitting role for approval",
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": "object",
- "name": "Amazon Web Services"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "newtestr",
- "reason": "submitting role",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "searchtag",
- "workflowRequestFormId": "88gkhgkg94jgjj"
}, - "type": "create"
}, - "requestType": "Catalog",
- "resolution": "Initiated",
- "status": "Request Submitted",
- "summary": "New Role Request - newtestr",
- "workflowName": "AIMS Approval"
}, - "timeStamp": "2023-11-28T09:39:22.665+0000"
}, - "justification": "submitting role",
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": {
- "$oid": "65608f7563f8d3a5b5cbbbe7"
}, - "name": "create"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "jerome",
- "reason": "submitting role request",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "searchtag",
- "workflowRequestFormId": "888gjjghhj"
}, - "type": "create"
}, - "requestType": "Catalog",
- "resolution": "Initiated",
- "status": "Waiting for Approval",
- "summary": "New Role Request - newtestr",
- "workflowName": "AIMS Approval"
}
]
Fetch by Type
This Endpoint will give you the details of a Request by type
Authorizations:
query Parameters
filter | string This is the type of the request that you want to filter. Requests can be create, modify, revoke. |
pagesize | string This is the page size number |
Responses
Response samples
- 200
[- {
- "_id": {
- "$oid": "6565b512425c8055c059d598"
}, - "IDM": "IDE",
- "_etag": {
- "$oid": "6565b54ad87a5a00075e6f76"
}, - "collection": "UserRequest",
- "createDate": "2023-11-28T09:39:10.919Z",
- "history": {
- "diff": {
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": {
- "$oid": "63aee2a293ccdf675cc61f1e"
}, - "name": "Amazon Web Services"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "newtestr",
- "reason": "submitting role request",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "roletag",
- "workflowRequestFormId": "d4085akgk"
}, - "type": "create"
}, - "status": "Waiting for Approval"
}, - "snapshot": {
- "IDM": "IDE",
- "_id": "6565b512425c8055c059d598",
- "collection": "UserRequest",
- "createDate": "2023-11-28T09:39:10.919Z",
- "justification": "submitting role for approval",
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": "object",
- "name": "Amazon Web Services"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "newtestr",
- "reason": "submitting role",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "searchtag",
- "workflowRequestFormId": "88gkhgkg94jgjj"
}, - "type": "create"
}, - "requestType": "Catalog",
- "resolution": "Initiated",
- "status": "Request Submitted",
- "summary": "New Role Request - newtestr",
- "workflowName": "AIMS Approval"
}, - "timeStamp": "2023-11-28T09:39:22.665+0000"
}, - "justification": "submitting role",
- "payload": {
- "role": {
- "IDM": "IDE",
- "applications": {
- "_id": {
- "$oid": "65608f7563f8d3a5b5cbbbe7"
}, - "name": "create"
}, - "approvalWorkflow": "Auto Role Approval",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "description": "newtestr",
- "displayName": "newtestr",
- "isCertifiable": true,
- "isRequestable": true,
- "name": "newtestr",
- "performer": "jerome",
- "reason": "submitting role request",
- "riskLevel": "low",
- "roleOwnerLogin": "jerome",
- "rule": "{\"$and\":[]}",
- "ruleForm": "{\"$and\":[{\"attribute\":\"\",\"condition\":\"\",\"value\":\"\",\"options\":[\"\"]}]}",
- "searchTags": "searchtag",
- "workflowRequestFormId": "888gjjghhj"
}, - "type": "create"
}, - "requestType": "Catalog",
- "resolution": "Initiated",
- "status": "Waiting for Approval",
- "summary": "New Role Request - newtestr",
- "workflowName": "AIMS Approval"
}
]
Create
In order to submit a request for provisioning/de-provisioning, revoke or modification of accounts. You need to first create a new cart for those items using this endpoint and then submit the cart using the submit request endpoint.
Authorizations:
Request Body schema: application/json
User Cart with beneficiary, requester and cart items
object non-empty This would include the requester details like - user login | |
Array of objects non-empty This would include the beneficiary details, entityID and entityType. You can request for applications/entitlements/roles. You can filter the appropriate entity using the entityID and you can search for the same using the search catalog endpoint | |
owner | string owner of the cart - user login |
name | string name of the cart |
Responses
Request samples
- Payload
{- "requester": {
- "login": "jerome",
- "employeeNumber": "IAMSATHE026",
- "displayName": "Jerome Fern"
}, - "cartItems": [
- {
- "beneficiaries": {
- "login": "jerome",
- "employeeNumber": "IAMSATHE026",
- "displayName": "Jerome Fern",
- "form": {
- "First Name": "Jerome",
- "Last Name": "Fern",
- "Phone Number": "847-547-5478",
- "User Login": "jerome"
}, - "type": "modify"
}, - "entityId": "63af258b93ccdf675ccab0da",
- "entityType": "Role"
}
], - "owner": "User/63aec79793ccdf675cc4d018",
- "name": "default"
}
Response samples
- 201
{- "correlationId": "657820f1171a9761e416ee25",
- "result": true
}
Submit
This Endpoint allows you to create a request by submitting the cart. Before you can submit the request, you need to first create a new cart with the items that you want to request access using the Create a new request endpoint.
Authorizations:
Request Body schema: application/json
User Cart with beneficiary, requester and cart items
object non-empty This would include the requester details like - user login | |
Array of objects non-empty This would include the beneficiary details, entityID and entityType. You can request for applications/entitlements/roles. You can filter the appropriate entity using the entityID and you can search for the same using the search catalog endpoint | |
owner | string owner of the cart - user login |
name | string name of the cart |
accessToken | string If you have an access token, you can specify this here |
archive | boolean Enum: true false |
justification | string Here you can enter the justification for the request that you are submitting |
modifiedOn | date |
collection | string |
object |
Responses
Request samples
- Payload
{- "requester": {
- "login": "jerome",
- "employeeNumber": "IAMSATHE026",
- "displayName": "Jerome Fern"
}, - "cartItems": [
- {
- "beneficiaries": {
- "login": "jerome",
- "employeeNumber": "IAMSATHE026",
- "displayName": "Jerome Fern",
- "form": {
- "First Name": "Jerome",
- "Last Name": "Fern",
- "Phone Number": "847-547-5478",
- "User Login": "jerome"
}, - "type": "modify"
}, - "entityId": "63af258b93ccdf675ccab0da",
- "entityType": "Role"
}
], - "owner": "User/63aec79793ccdf675cc4d018",
- "name": "default",
- "accessToken": "99849abbchf04khgjkg",
- "archive": false,
- "justification": "Submitting Request for Access to AWS Application",
- "modifiedOn": "2023-12-12T09",
- "collection": "UserCart",
- "_etag": {
- "oid": "657823d2dc184400078ef1f8"
}
}
Response samples
- 200
{- "correlationId": "657820f1171a9761e416ee25",
- "result": true
}
Utilize 'Task' endpoints to retrieve, act upon, and comment on task details. Tasks include Completed, Expired, approval, and rejected types. Use the Fetch task endpoint to obtain task details with filter attributes. Perform actions like approve, reject, claim, release, escalate, and re-assign. Additionally, use provided endpoints to add comments to tasks.
Fetch
This Endpoint will give you the list of Tasks based on filters.
Authorizations:
query Parameters
filter | string string with JSON object containing the filter attributes. For example, Completed tasks would have the JSON filter attribute {status:Completed,userLogin:user}. Expired Tasks would have the JSON filter {status:Expired,userLogin:user}. Similarly you can have the filters for completed approval and completed rejects tasks for a user |
Responses
Response samples
- 200
[- {
- "history": [
- {
- "timestamp": "string",
- "perpetrator": "string",
- "snapshot": { },
- "delta": { }
}
], - "expiryDate": "string",
- "updateDate": "string",
- "createDate": "string",
- "outcome": "string",
- "state": "Assigned",
- "escalationAssignee": "string",
- "form": { },
- "payload": { },
- "requestID": "string",
- "possibleActions": [
- {
- "action": "string",
- "displayName": "string"
}
], - "assigneeType": "user",
- "assignee": "string",
- "type": "ApprovalTask",
- "description": "string",
- "summary": "string",
- "title": "string",
- "name": "string",
- "comments": [
- {
- "comment": "string",
- "attachmentId": "string",
- "timestamp": "string",
- "userLogin": "string"
}
]
}
]
Action
This endpoint will enable you to perform action on a task such as- approve, reject, claim, release, escalate and re-assign. In order to run the task, you will need the task object ID which you can get from the fetch task endpoint.
Authorizations:
path Parameters
id required | string This is the task object id which you can get from the Fetch Task endpoint. |
action required | string Enum: "Claim" "Approve" "Reject" "Escalate" "Re-Assign" Example: Approve You can perform different actions on a task depending on the workflow of the task. Different actions can be - Claim, Approve, Reject, Escalate, Re-Assign |
Request Body schema: application/json
This is the task operation object which basically has the user login details and comment (if any)
userLogin | string |
comment | string |
Responses
Request samples
- Payload
{- "userLogin": "string",
- "comment": "string"
}
Response samples
- 200
{- "IDM": "IDE",
- "_id": {
- "$oid": "65802d8e994114206f6e6d3b"
}, - "assignee": "zachary",
- "assigneeType": "User",
- "collection": "UserTask",
- "createDate": "2023-12-18T11:31:26.166+0000",
- "entityObject": {
- "IDM": "IDE",
- "ITOwner": "michael",
- "_id": "63aee3b793ccdf675cc62d3d",
- "approvalWorkflow": "Manager and BO Grant and Auto Revoke",
- "approvalWorkflowDisplayName": "Manager and BO Grant and Auto Revoke",
- "archiveId": "63bd61a8473f7335b8faaad1",
- "businessOwner": "ali",
- "collection": "TargetSystem",
- "createdOn": "2022-12-30T13:12:23.897Z",
- "description": "Buffer is used to manage social media channels.",
- "disabled": true,
- "displayName": "Buffer",
- "form": {
- "dataType": "string",
- "isAccountName": true,
- "isMultiValue": true,
- "isReconKey": true,
- "isRequired": true,
- "matchingAttribute": "firstName",
- "name": "First Name",
- "syncDirection": "no-sync"
}, - "integrationLevel": "Disconnected",
- "isRequestable": true,
- "logoURL": "Logo.files/63aee3b793ccdf675cc62d3d/binary",
- "name": "Buffer",
- "performer": "Manual Fulfiller",
- "requestFormId": "63bd3906473f7335b8f88ac4",
- "requestFormName": "Buffer Form",
- "riskLevel": "medium",
- "schedule": {
- "repeat": "Do not repeat"
}, - "searchTags": "Marketing",
- "trustedReconciliation": true,
- "workflowRequestFormId": null
}, - "expiry": 15,
- "expiryDate": "2024-01-02T11:31:26.166+0000",
- "history": {
- "diff": {
- "IDM": "IDE",
- "_id": "65802d8e994114206f6e6d3b",
- "assignee": "zachary",
- "assigneeType": "User",
- "collection": "UserTask",
- "createDate": "2023-12-18T11:31:26.166+0000",
- "expiry": 15,
- "expiryDate": "2024-01-02T11:31:26.166+0000",
- "name": "Manager Approval Task",
- "payload": {
- "beneficiary": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "entityId": "63aee3b793ccdf675cc62d3d",
- "entityType": "TargetSystem",
- "form": {
- "Phone Number": null,
- "What social media channels do you need access to?": null,
- "firstName": "Jerome",
- "lastName": "Fern",
- "login": "jerome"
}, - "requester": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "type": "create"
}, - "possibleActions": {
- "action1": "ManagerApprove",
- "displayName1": "Approve",
- "action2": "ManagerReject",
- "displayName2": "Reject",
- "action3": "Escalate",
- "displayName3": "Escalate",
- "action4": "Reassign",
- "displayName4": "Reassign"
}, - "requestId": "e4b07",
- "requestJustification": "hhjh",
- "requestObjectId": "65802d8d994114206f6e6cf2",
- "status": "Assigned",
- "title": "Buffer",
- "type": "ApprovalTask",
- "workflowName": "Manager and BO Grant and Auto Revoke"
}, - "timeStamp": "2023-12-18T11:31:26.226+0000"
}, - "name": "Manager Approval Task",
- "outcome": "MANAGERAPPROVE",
- "payload": {
- "beneficiary": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "entityId": "63aee3b793ccdf675cc62d3d",
- "entityType": "TargetSystem",
- "form": {
- "Phone Number": null,
- "What social media channels do you need access to?": null,
- "firstName": "Jerome",
- "lastName": "Fern",
- "login": "jerome"
}, - "requester": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "type": "create"
}, - "possibleActions": null,
- "requestId": "e4b07",
- "requestJustification": "hhjh",
- "requestObject": {
- "IDM": "IDE",
- "_id": "65802d8d994114206f6e6cf2",
- "beneficiary": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "collection": "UserRequest",
- "correlationId": "b411bb8068c24c6ea6bcbeace0880a5c",
- "createDate": "2023-12-18T11:31:25.810Z",
- "history": {
- "diff": {
- "beneficiary": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "payload": {
- "entityId": "63aee3b793ccdf675cc62d3d",
- "entityType": "TargetSystem",
- "form": {
- "Phone Number": null,
- "What social media channels do you need access to?": null,
- "firstName": "Jerome",
- "lastName": "Fern",
- "login": "jerome"
}, - "type": "create"
}, - "requester": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "status": "Waiting for Manager Approval"
}, - "snapshot": {
- "IDM": "IDE",
- "_id": "65802d8d994114206f6e6cf2",
- "beneficiary": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "collection": "UserRequest",
- "correlationId": "b411bb8068c24c6ea6bcbeace0880a5c",
- "createDate": "2023-12-18T11:31:25.810Z",
- "justification": "hhjh",
- "payload": {
- "entityId": "63aee3b793ccdf675cc62d3d",
- "entityType": "TargetSystem",
- "form": {
- "Phone Number": null,
- "What social media channels do you need access to?": null,
- "firstName": "Jerome",
- "lastName": "Fern",
- "login": "jerome"
}, - "type": "create"
}, - "requestId": "e4b07",
- "requestType": "Access",
- "requester": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "resolution": "Initiated",
- "status": "Request Submitted",
- "workflowName": "Manager and BO Grant and Auto Revoke"
}, - "timeStamp": "2023-12-18T11:31:28.388+0000"
}, - "justification": "hhjh",
- "payload": {
- "entityId": "63aee3b793ccdf675cc62d3d",
- "entityType": "TargetSystem",
- "form": {
- "Phone Number": null,
- "What social media channels do you need access to?": null,
- "firstName": "Jerome",
- "lastName": "Fern",
- "login": "jerome"
}, - "type": "create"
}, - "requestId": "e4b07",
- "requestType": "Access",
- "requester": {
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "login": "jerome"
}, - "resolution": "Initiated",
- "status": "Waiting for Manager Approval",
- "workflowName": "Manager and BO Grant and Auto Revoke"
}, - "requestObjectId": "65802d8d994114206f6e6cf2",
- "result": true,
- "status": "Completed",
- "title": "Buffer",
- "type2": "ApprovalTask",
- "updateDate": "2023-12-18T11:32:26.722+0000",
- "updatedBy": "zachary",
- "updatedByDisplayName": "Zachary Graham",
- "updatedDate": "2023-12-18T11:32:26.728+0000",
- "workflowName": "Manager and BO Grant and Auto Revoke"
}
Comment
This Endpoint allows you to Add attachment and comments to tasks.
Authorizations:
Request Body schema: multipart/form-data
The properties object is a JSON object which would contain the "taskId", "userLogin", "message", "filename". For Example "userLogin":"jerome","message":"test comment","taskId":"64f99c55a5ff95f7e0dddc26"
attachment | string |
object |
Responses
Response samples
- 200
{- "history": [
- {
- "timestamp": "string",
- "perpetrator": "string",
- "snapshot": { },
- "delta": { }
}
], - "expiryDate": "string",
- "updateDate": "string",
- "createDate": "string",
- "outcome": "string",
- "state": "Assigned",
- "escalationAssignee": "string",
- "form": { },
- "payload": { },
- "requestID": "string",
- "possibleActions": [
- {
- "action": "string",
- "displayName": "string"
}
], - "assigneeType": "user",
- "assignee": "string",
- "type": "ApprovalTask",
- "description": "string",
- "summary": "string",
- "title": "string",
- "name": "string",
- "comments": [
- {
- "comment": "string",
- "attachmentId": "string",
- "timestamp": "string",
- "userLogin": "string"
}
]
}
You might want to see the details of a user account. Endpoint given under this section enables you to fetch the details of any user account. You can use the userid, login and status filter parameters in order to search and fetch the details of a user account.
Fetch
This Endpoint lets you get the user account. You would have to enter the login and userid as parameters to get the details of the user account.
Authorizations:
query Parameters
userid | string Here you would have to enter the userid to get the user details |
login | string Here you would have to enter the user login details. |
status | string You can also use the status filer to further get more specific response based on the status. For example, the status can be "Provisioned" |
Responses
Response samples
- 200
{- "_id": {
- "$oid": "6565b512425c8055c059d598"
}, - "IDM": "IDE",
- "associatedRoles": [
- "Marketing Content Specialist"
], - "collection": "UserAccount",
- "entitlements": {
- "_id": {
- "$oid": "63aefd2f93ccdf675cc750b7"
}, - "associatedRoles": [
- "Marketing Content Specialist"
], - "entitlementId": "63aefd2f93ccdf675cc750b7",
- "entitlementName": "Salesforce Marketing User",
- "provisionMechanism": "Role",
- "provisionedDate": "2023-03-07T07:20:40.855+0000",
- "status": "Provisioned"
}, - "form": {
- "First Name": "Steve",
- "Last Name": "Clark",
- "Phone Number": "514-747-3111",
- "User Login": "steve"
}, - "login": "steve",
- "logoURL": "Logo.files/63aefd2f93ccdf675cc7509f/binary",
- "provisionMechanism": "Role",
- "provisionedDate": "2023-03-07T07:20:40.855+0000",
- "status": "Provisioned",
- "targetSystemId": "63aefd2f93ccdf675cc7509f",
- "targetSystemName": "Salesforce",
- "userId": "63aec79193ccdf675cc4cbbb"
}
Fetch All
This Endpoint lets you fetch the list of roles and their details. You can enter the display name of the role and page size as query filters.
Authorizations:
query Parameters
displayName | string This is the display name of the role |
pagesize | string Here you can enter the page size. Page Size is a number. |
Responses
Response samples
- 200
{- "performer": "jerome",
- "riskLevel": "low",
- "displayName": "All Employees",
- "searchTags": "All Employees",
- "description": "This Role is assigned to all Employees.",
- "rule": "{\"$and\":[{\"status\":\"Active\"},{\"department\":{\"$nin\":[\"CO\"]}}]}",
- "isCertifiable": true,
- "collection": "Role",
- "workflowRequestFormId": "88478478abjkhk9",
- "createdOn": "2022-12-30T15:28:23.827Z",
- "approvalWorkflowDisplayName": "Auto Role Approval",
- "IDM": "IDE",
- "roleOwnerLogin": "samantha",
- "isRequestable": true,
- "name": "All Employees",
- "disabled": false,
- "ruleForm": "{\"$and\":[{\"attribute\":\"status\",\"condition\":\"equals\",\"value\":\"Active\",\"options\":[\"Active\"]},{\"attribute\":\"department\",\"condition\":\"notin\",\"value\":[\"CO\"],\"options\":[\"CO\"]}]}",
- "applications": {
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "name": "Salesforce",
- "entitlements": {
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "name": "Salesforce Read Only"
}
}, - "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "approvalWorkflow": "Auto Role Approval"
}
Operation
This endpoint lets you do operation on the role. The operations can be Enable/Disable/Retire
Authorizations:
query Parameters
roleID | string Example: roleID=63aed43793ccdf675cc58246 roleID of the role for which you want take the action. You can fetch the roleID using the search catalog endpoint. |
operation | string Enum: "Retire" "Enable" "Disable" Example: operation=Retire This is the operation that you want to take for the role. The operation can be, enable/disable/retire. |
Responses
Response samples
- 200
{- "IDM": "IDE",
- "_id": {
- "$oid": "63af055393ccdf675cc899ac"
}, - "applications": {
- "_id": {
- "$oid": "63aec73493ccdf675cc4c210"
}, - "entitlements": {
- "_id": {
- "$oid": "63aec73493ccdf675cc4c221"
}, - "name": "Google Workspace Super Administrator"
}, - "name": "Google Workspace"
}, - "approvalWorkflow": "Group Role Approval",
- "approvalWorkflowDisplayName": "Group Role Approval",
- "approver1": "Approval Group 2",
- "approver2": "Approval Group 3",
- "approver3": "CEO",
- "collection": "Role",
- "createdOn": "2022-12-30T15:35:47.633Z",
- "description": "This Role is assigned to all Chief Officers.",
- "disabled": true,
- "displayName": "Chief Officer",
- "isCertifiable": null,
- "isRequestable": true,
- "name": "Chief Officer",
- "performer": null,
- "retired": true,
- "riskLevel": "high",
- "roleOwnerLogin": "derrick",
- "rule": "$and:[department:CO]",
- "ruleForm": "$and:[attribute:departmentcondition:equalsvalue:COoptions:[CO]]",
- "searchTags": "CXO Roles",
- "workflowRequestFormId": "6085f65f432acc2a019f1fbe"
}
Endpoint under this section enables you to fetch the list of applications and their details.
Fetch All
This Endpoint lets you fetch the list of application and their details. You can enter the display name of the application and page size as query filters.
Authorizations:
query Parameters
displayName | string This is the display name of the application |
pagesize | string Here you can enter the page size. Page Size is a number. |
Responses
Response samples
- 200
{- "performer": "Manual Fulfiller",
- "riskLevel": "medium",
- "displayName": "Zendesk",
- "searchTags": "IT",
- "description": "Custom Support Tracking System",
- "collection": "TargetSystem",
- "createdOn": "2022-12-30T12:06:15.174Z",
- "approvalWorkflowDisplayName": "Group Approval",
- "IDM": "IDE",
- "form": {
- "isRequired": true,
- "matchingAttribute": "firstName",
- "syncDirection": "no-sync",
- "dataType": "string",
- "isReconKey": false,
- "name": "First Name",
- "isAccountName": false,
- "isMultiValue": false
}, - "integrationLevel": "integrationLevel",
- "logoURL": "Logo.files/63af022493ccdf675cc795e1/binary",
- "trustedReconciliation": false,
- "workflowRequestFormId": "6085f65f432acc2a019f1fbe",
- "schedule": {
- "repeat": "Do not repeat"
}, - "isRequestable": true,
- "name": "Zendesk",
- "disabled": false,
- "id": {
- "$oid": "63af039793ccdf675cc7aa10"
}, - "approvalWorkflow": "Group Approval",
- "businessOwner": "liz",
- "targetSystemDisplayName": "ADP",
- "ITOwner": "jerome",
- "approver1": "Approval Group 2",
- "approver2": "Approval Group 3",
- "approver3": "CEO"
}
Reconciliation By ID
This endpoint enables you to do the application reconciliation
Authorizations:
path Parameters
id required | string entityID of the application for which you want to run the re-conciliation. You can filter the appropriate entity using the entityID and you can search for the same using the search catalog endpoint |
Request Body schema: application/json
condition | string This will update IDHub if any mismatch is found. |
operation | string Enum: "reconcile" "provision" If you want to reconcile your data from the target system, then this should be reconcile and if you want to provision accounts then you need to enter provision here |
entityType | string Enum: "Account" "Entitlement" Entity type can be either accounts or entitlements depending on whether you are reconciling accounts or entitlements for the recon operation |
Responses
Request samples
- Payload
{- "condition": "string",
- "operation": "reconcile",
- "entityType": "Account"
}
Response samples
- 201
{- "targetSystemId": "64ad77dafdfcc6b382aeaceb",
- "targetSystemName": "EntraID",
- "tenantName": "vc3",
- "resourceType": "account",
- "startDate": "2023-12-13T10:39:06.650Z",
- "status": "Initiated",
- "collection": "ReconciliationBatch",
- "dryRun": false,
- "IDM": "IDE",
- "_etag": {
- "$oid": "657989ca48f8a6000676b260"
}, - "_id": {
- "$oid": "657989cafdfcc6b38247bccf"
}, - "targetSystem": {
- "IDM": "IDE",
- "form": {
- "caseExact": true,
- "dataType": "string",
- "description": "The city in which the user is located. Maximum length is 128 characters.",
- "idhubFieldName": "officeAddressCity",
- "isAccountName": true,
- "isDisabled": true,
- "isMultiValue": true,
- "isRecon": true,
- "isReconKey": true,
- "isRequired": true,
- "isSynced": true,
- "isVisible": true,
- "matchingAttribute": "officeAddressCity",
- "multiValued": true,
- "mutability": "readWrite",
- "name": "city",
- "required": true,
- "returned": "default",
- "syncDirection": "bi-directional",
- "type": "string",
- "uniqueness": "none"
}, - "_etag": {
- "$oid": "657726f148f8a6000676adf2"
}, - "_id": {
- "$oid": "64ad77dafdfcc6b382aeaceb"
}, - "_meta": {
- "collection": "TargetSystem",
- "location": "TargetSystem/64ad77dafdfcc6b382aeaceb",
- "resourceType": "TargetSystem"
}, - "ITOwner": "jerome",
- "applicationURL": "portal.EntraID.com/",
- "approvalWorkflow": "Auto Approval",
- "approvalWorkflowDisplayName": "Auto Approval",
- "archiveId": "657726f1fdfcc6b382222aa0",
- "authenticationType": "OAuth2 Authentication",
- "businessOwner": "jerome",
- "collection": "TargetSystem",
- "connectionCredentials": null,
- "connectorCredentials": null,
- "connectorPassword": null,
- "connectorURL": null,
- "connectorUserName": null,
- "createdOn": "2023-07-11T15:40:10.401Z",
- "description": "This is EntraID Active Directory instance.",
- "disabled": true,
- "displayName": "EntraID",
- "integrationLevel": "Connected",
- "isCertifiable": null,
- "isDefaultAttr": true,
- "isRequestable": true,
- "logoURL": "Logo.files/64ad76a948f8a60006764fa5/binary",
- "name": "EntraID",
- "performer": null,
- "reason": "Edit app",
- "reconSchedule": null,
- "reconciliationSchedule": null,
- "requestFormId": null,
- "requestFormName": null,
- "riskLevel": "low",
- "schedule": {
- "repeat": "Do not repeat"
}, - "searchTags": "Connected Source of Truth",
- "staleCheckEnabled": true,
- "staleDays": 5,
- "trustedReconciliation": true,
- "updatedOn": "2023-12-11T15:12:49.051Z",
- "workflowRequestFormId": null,
- "entitlementChanges": {
- "add": {
- "name": "string"
}, - "update": {
- "name": "string"
}, - "delete": {
- "IDM": "IDE",
- "_etag": {
- "$oid": "6577251248f8a6000676ac7c"
}, - "_id": {
- "$oid": "65772512fdfcc6b38221f733"
}, - "form": {
- "dataType": "checkbox",
- "description": "A permission for a file. A permission grants a user group domain or the world access to a file or a folder hierarchy.",
- "name": "role",
- "readOnly": true,
- "required": true
}, - "formValues": {
- "role": "Member"
}, - "id": "GROUP~9874b4bc-0f02-42c1-821b-c8bfbc91a8bd",
- "isExisting": true,
- "isRequestable": true,
- "isSynced": true,
- "lastSyncedOn": {
- "$numberLong": 1702307090312
}, - "mailEnabled": true,
- "mailNickName": "62e4b7c2-e",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Entitlements/GROUP~9874b4bc-0f02-42c1-821b-c8bfbc91a8bd",
- "resourceType": "Entitlement"
}, - "name": "GROUP~9874b4bc-0f02-42c1-821b-c8bfbc91a8bd",
- "performer": null,
- "requestable": true,
- "riskLevel": "low",
- "schemas": "urn:sath:params:scim:api:o365:1.0:Entitlement",
- "searchTags": "Connected Source of Truth",
- "targetSystemDisplayName": "EntraID",
- "targetSystemId": "64ad77dafdfcc6b382aeaceb",
- "targetSystemName": "EntraID",
- "ITOwner": "jerome",
- "approvalWorkflow": "Auto Approval",
- "approvalWorkflowDisplayName": "Auto Approval",
- "businessOwner": "jerome",
- "collection": "Entitlement",
- "createdOn": "2023-12-11T15:04:50.312Z",
- "description": "GROUP~9874b4bc-0f02-42c1-821b-c8bfbc91a8bd",
- "disabled": true,
- "displayName": "GROUP~Marketing Content Specialist",
- "externalId": "9874b4bc-0f02-42c1-821b-c8bfbc91a8bd"
}
}
}, - "_meta": {
- "collection": "ReconciliationBatch",
- "location": "ReconciliationBatch/657989cafdfcc6b38247bccf",
- "resourceType": "ReconciliationBatch"
}
}
Fetch past Recon Events
This endpoint enables you to view the application recon events
Authorizations:
query Parameters
object This is the Recon Batch ID | |
resourceType | string Example: resourceType=User This is the resourceType for the recon events. |
Responses
Response samples
- 201
{- "_id": {
- "$oid": "65798a00fdfcc6b38247c729"
}, - "_etag": {
- "$oid": "65798a0048f8a6000676b333"
}, - "IDM": "IDE",
- "collection": "ReconciliationEvent",
- "createDate": "2023-12-13T10:40:00.872Z",
- "eventType": "TargetSystemAccount",
- "lastModified": "2023-12-13T10:40:00.872Z",
- "reconciliationBatchId": {
- "$oid": "657989cafdfcc6b38247bccf"
}, - "resourceType": "User",
- "rowNumber": 42,
- "status": "EXISTING_USER_ACCOUNT_RECONCILED_NO_CHANGE",
- "tenant": "vc3",
- "numberOfEntitlements": 1,
- "resourceDisplayName": "Zachary Graham",
- "resourceFromTargetSystem": {
- "city": "Mount Prospect",
- "companyName": "I Am Sath",
- "country": "US",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeHireDate": "2021-03-01T06:00:00.000Z",
- "employeeId": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": {
- "displayName": "GROUP~Chief Officer",
- "externalId": "999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "form": {
- "dataType": "checkbox",
- "description": "A permission for a file. A permission grants a user group domain or the world access to a file or a folder hierarchy.",
- "name": "role",
- "options": "Member",
- "readOnly": true,
- "required": true
}, - "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "mailEnabled": true,
- "mailNickName": "9d16dad0-d",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Entitlements/GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "resourceType": "Entitlement"
}, - "name": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "schemas": "urn:sath:params:scim:api:o365:1.0:Entitlement"
}, - "externalId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "givenName": "Zachary",
- "id": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "jobTitle": "CTO",
- "mailNickname": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "mobilePhone": "630-156-2546",
- "postalCode": 60056,
- "state": "Illinois",
- "streetAddress": "985 Lively Lane",
- "surname": "Graham",
- "usageLocation": "US",
- "userPrincipalName": "[email protected]"
}, - "resourceId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "resourceInIdhubBeforeModification": {
- "IDM": "IDE",
- "_id": {
- "$oid": "63aec79893ccdf675cc4d124"
}, - "_meta": {
- "collection": "User",
- "location": "User/63aec79893ccdf675cc4d124",
- "resourceType": "User"
}, - "collection": "User",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeNumber": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": null,
- "firstName": "Zachary",
- "jobTitle": "CTO",
- "lastName": "Graham",
- "location": "US",
- "login": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "officeAddressCity": "Mount Prospect",
- "officeAddressCountry": "US",
- "officeAddressLine1": "985 Lively Lane",
- "officeAddressPostal": 60056,
- "officeAddressState": "Illinois",
- "organizationName": "I Am Sath",
- "phoneNumber": "630-156-2546"
}, - "userAccountBeforeModification": {
- "IDM": "IDE",
- "_etag": {
- "$oid": "6579869148f8a6000676b258"
}, - "_id": {
- "$oid": "64ad7f76fdfcc6b382af2ef6"
}, - "_meta": {
- "collection": "UserAccount",
- "location": "UserAccount/64ad7f76fdfcc6b382af2ef6",
- "resourceType": "UserAccount"
}, - "collection": "UserAccount",
- "entitlements": {
- "_id": {
- "$oid": "65772733fdfcc6b3822239a6"
}, - "entitlementId": "65772733fdfcc6b3822239a6",
- "entitlementName": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "provisionMechanism": "Connected Reconciliation",
- "provisionedDate": "2023-12-11T15:13:59.629Z",
- "status": "Provisioned"
}, - "form": {
- "birthday": "0001-01-01T08:00:00.000Z",
- "city": "Mount Prospect",
- "companyName": "I Am Sath",
- "country": "US",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeHireDate": "2021-03-01T06:00:00.000Z",
- "employeeId": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": {
- "displayName": "GROUP~Chief Officer",
- "externalId": "999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "form": {
- "dataType": "checkbox",
- "description": "A permission for a file. A permission grants a user group domain or the world access to a file or a folder hierarchy.",
- "name": "role",
- "options": "Member",
- "readOnly": true,
- "required": true
}, - "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "mailEnabled": true,
- "mailNickName": "9d16dad0-d",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Entitlements/GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "resourceType": "Entitlement"
}, - "name": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "schemas": "urn:sath:params:scim:api:o365:1.0:Entitlement"
}, - "externalId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "givenName": "Zachary",
- "id": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "jobTitle": "CTO",
- "mailNickname": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified:_etag": {
- "$oid": "65798a0048f8a6000676b333"
}, - "IDM": "IDE",
- "collection": "ReconciliationEvent",
- "createDate": "2023-12-13T10:40:00.872Z",
- "eventType": "TargetSystemAccount",
- "lastModified": "2023-12-13T10:40:00.872Z",
- "reconciliationBatchId": {
- "$oid": "657989cafdfcc6b38247bccf"
}, - "resourceType": "User",
- "rowNumber": 42,
- "status": "EXISTING_USER_ACCOUNT_RECONCILED_NO_CHANGE",
- "tenant": "vc3",
- "numberOfEntitlements": 1,
- "resourceDisplayName": "Zachary Graham",
- "resourceFromTargetSystem": {
- "city": "Mount Prospect",
- "companyName": "I Am Sath",
- "country": "US",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeHireDate": "2021-03-01T06:00:00.000Z",
- "employeeId": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": {
- "displayName": "GROUP~Chief Officer",
- "externalId": "999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "form": {
- "dataType": "checkbox",
- "description": "A permission for a file. A permission grants a user group domain or the world access to a file or a folder hierarchy.",
- "name": "role",
- "options": "Member",
- "readOnly": true,
- "required": true
}, - "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "mailEnabled": true,
- "mailNickName": "9d16dad0-d",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Entitlements/GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "resourceType": "Entitlement"
}, - "name": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "schemas": "urn:sath:params:scim:api:o365:1.0:Entitlement"
}, - "externalId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "givenName": "Zachary",
- "id": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "jobTitle": "CTO",
- "mailNickname": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "mobilePhone": "630-156-2546",
- "postalCode": 60056,
- "state": "Illinois",
- "streetAddress": "985 Lively Lane",
- "surname": "Graham",
- "usageLocation": "US",
- "userPrincipalName": "[email protected]"
}, - "resourceId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "resourceInIdhubBeforeModification": {
- "IDM": "IDE",
- "_id": {
- "$oid": "63aec79893ccdf675cc4d124"
}, - "_meta": {
- "collection": "User",
- "location": "User/63aec79893ccdf675cc4d124",
- "resourceType": "User"
}, - "collection": "User",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeNumber": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": null,
- "firstName": "Zachary",
- "jobTitle": "CTO",
- "lastName": "Graham",
- "location": "US",
- "login": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "officeAddressCity": "Mount Prospect",
- "officeAddressCountry": "US",
- "officeAddressLine1": "985 Lively Lane",
- "officeAddressPostal": 60056,
- "officeAddressState": "Illinois",
- "organizationName": "I Am Sath",
- "phoneNumber": "630-156-2546"
}, - "userAccountBeforeModification": {
- "IDM": "IDE",
- "_etag": {
- "$oid": "6579869148f8a6000676b258"
}, - "_id": {
- "$oid": "64ad7f76fdfcc6b382af2ef6"
}, - "_meta": {
- "collection": "UserAccount",
- "location": "UserAccount/64ad7f76fdfcc6b382af2ef6",
- "resourceType": "UserAccount"
}, - "collection": "UserAccount",
- "entitlements": {
- "_id": {
- "$oid": "65772733fdfcc6b3822239a6"
}, - "entitlementId": "65772733fdfcc6b3822239a6",
- "entitlementName": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "provisionMechanism": "Connected Reconciliation",
- "provisionedDate": "2023-12-11T15:13:59.629Z",
- "status": "Provisioned"
}, - "form": {
- "birthday": "0001-01-01T08:00:00.000Z",
- "city": "Mount Prospect",
- "companyName": "I Am Sath",
- "country": "US",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeHireDate": "2021-03-01T06:00:00.000Z",
- "employeeId": "IAMSATHE019",
- "employeeType": "Employee",
- "entitlements": {
- "displayName": "GROUP~Chief Officer",
- "externalId": "999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "form": {
- "dataType": "checkbox",
- "description": "A permission for a file. A permission grants a user group domain or the world access to a file or a folder hierarchy.",
- "name": "role",
- "options": "Member",
- "readOnly": true,
- "required": true
}, - "formValues": {
- "role": "Member"
}, - "id": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "mailEnabled": true,
- "mailNickName": "9d16dad0-d",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Entitlements/GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "resourceType": "Entitlement"
}, - "name": "GROUP~999a9e9f-c9a6-44fc-9f70-01b6c0496db6",
- "schemas": "urn:sath:params:scim:api:o365:1.0:Entitlement"
}, - "externalId": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "givenName": "Zachary",
- "id": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "jobTitle": "CTO",
- "mailNickname": "zachary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "meta": {
- "created": "1970-01-01T00:00:00.000Z",
- "lastModified": "1970-01-01T00:00:00.000Z",
- "location": "/Accounts/d9c7200a-3322-4035-9e7b-03974624d4f7",
- "resourceType": "Account"
}, - "mobilePhone": "630-156-2546",
- "name": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "postalCode": 60056,
- "schemas": "urn:sath:params:scim:api:o365:1.0:Account",
- "state": "Illinois",
- "streetAddress": "985 Lively Lane",
- "surname": "Graham",
- "usageLocation": "US",
- "userType": "Member"
}, - "lastSyncedOn": {
- "$date": 1702463121415
}, - "login": "zachary",
- "logoURL": "Logo.files/64ad76a948f8a60006764fa5/binary",
- "provisionMechanism": "Connected Reconciliation",
- "provisionedDate": "2023-07-11T16:12:38.994Z",
- "status": "Provisioned",
- "sync": true,
- "targetSystemId": "64ad77dafdfcc6b382aeaceb",
- "targetSystemName": "EntraID",
- "updatedOn": "2023-10-27T15:41:44.563+0000",
- "userId": "63aec79893ccdf675cc4d124"
}, - "location": "/Accounts/d9c7200a-3322-4035-9e7b-03974624d4f7"
}, - "resourceType": "Account",
- "mobilePhone": "630-156-2546",
- "name": "d9c7200a-3322-4035-9e7b-03974624d4f7",
- "postalCode": 60056,
- "schemas": "urn:sath:params:scim:api:o365:1.0:Account",
- "state": "Illinois",
- "streetAddress": "985 Lively Lane",
- "surname": "Graham",
- "usageLocation": "US",
- "userType": "Member"
}, - "lastSyncedOn": {
- "$date": 1702463121415
}, - "login": "zachary",
- "logoURL": "Logo.files/64ad76a948f8a60006764fa5/binary",
- "provisionMechanism": "Connected Reconciliation",
- "provisionedDate": "2023-07-11T16:12:38.994Z",
- "status": "Provisioned",
- "sync": true,
- "targetSystemId": "64ad77dafdfcc6b382aeaceb",
- "targetSystemName": "EntraID",
- "updatedOn": "2023-10-27T15:41:44.563+0000",
- "userId": "63aec79893ccdf675cc4d124"
}
}
Operation
This endpoint enables you to do operation on application. The operations can be Enable/Disable/Retire
Authorizations:
query Parameters
targetsystemID | string Example: targetsystemID=63aed43793ccdf675cc58246 targetsystemID of the application for which you want take the action. You can fetch the targetsystemID using the search catalog endpoint. |
operation | string Enum: "Retire" "Enable" "Disable" Example: operation=Retire This is the operation that you want to take for the application. The operation can be, enable/disable/retire. |
Responses
Response samples
- 200
{- "IDM": "IDE",
- "ITOwner": "michael",
- "_id": {
- "$oid": "63aed43793ccdf675cc58246"
}, - "approvalWorkflow": "Manager Grant and Auto Revoke",
- "approvalWorkflowDisplayName": "Manager Grant and Auto Revoke",
- "businessOwner": "liz",
- "collection": "TargetSystem",
- "createdOn": "2022-12-30T12:06:15.145Z",
- "description": "HR and Payroll Use",
- "disabled": true,
- "displayName": "ADP",
- "form": {
- "dataType": "string",
- "isAccountName": true,
- "isMultiValue": true,
- "isReconKey": true,
- "isRequired": true,
- "matchingAttribute": "firstName",
- "name": "First Name",
- "syncDirection": "no-sync"
}, - "integrationLevel": "Disconnected",
- "isRequestable": true,
- "logoURL": "Logo.files/63aed43793ccdf675cc58246/binary",
- "name": "ADP",
- "performer": "Manual Fulfiller",
- "retired": true,
- "riskLevel": "low",
- "schedule": {
- "repeat": "Do not repeat"
}, - "searchTags": "All Employees HR",
- "trustedReconciliation": true
}
Endpoints under this section enables you to create a certification and run the certificate.
Fetch
This endpoint enables you to fetch the list of certifications for your tenant
Authorizations:
query Parameters
status | string Enum: "Active" "Draft" Example: status=Active This is the status of the certificate, which can be either Active or Draft |
pagesize | string Here you can enter the page size. Page Size is a number. |
Responses
Response samples
- 200
{- "_id": {
- "$oid": "64c8b2befdfcc6b382d8cb92"
}, - "_etag": {
- "$oid": "64c8b30948f8a600067691fe"
}, - "altCertifyUser": {
- "_id": {
- "$oid": "63aec79793ccdf675cc4d018"
}, - "IDM": "IDE",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:23.077Z",
- "department": "HR",
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "entitlements": null,
- "firstName": "Jerome",
- "homeAddressCity": "South Elgin",
- "homeAddressCountry": "US",
- "homeAddressLine1": "879 Ocean Drive",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60174,
- "isAdministrator": true,
- "jobTitle": "HR Director",
- "lastName": "Fern",
- "location": "US",
- "login": "jerome",
- "managerDisplayName": "Zachary Graham",
- "managerLogin": "zachary",
- "officeAddressCity": "South Elgin",
- "officeAddressCountry": "US",
- "officeAddressLine1": "879 Ocean Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "Illinois",
- "officeAddressZipcode": 60195,
- "organizationName": "I Am Sath",
- "phoneNumber": "847-569-5478",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee",
- "_etag": {
- "$oid": "64ae6c4f48f8a60006766f09"
}, - "employeeType": "Employee",
- "officeAddressPostal": 60174
}, - "alternateCertifier": "jerome",
- "alternateCertifierRole": null,
- "alternateCertifierToggle": "user",
- "alternateCertifierType": "User",
- "alternateCertifierUser": "Jerome Fern",
- "approverType": "none",
- "automaticEscalation": true,
- "certificationBy": "manually",
- "certificationDuration": 1,
- "certificationDurationType": "days",
- "certificationReminderEmail": true,
- "certifier": "jerome",
- "certifierDisplayName": "Jerome Fern",
- "certifierToggle": "user",
- "certifierType": "User",
- "certifyUser": {
- "_id": {
- "$oid": "63aec79793ccdf675cc4d018"
}, - "IDM": "IDE",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:23.077Z",
- "department": "HR",
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "entitlements": null,
- "firstName": "Jerome",
- "homeAddressCity": "South Elgin",
- "homeAddressCountry": "US",
- "homeAddressLine1": "879 Ocean Drive",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60174,
- "isAdministrator": true,
- "jobTitle": "HR Director",
- "lastName": "Fern",
- "location": "US",
- "login": "jerome",
- "logoURL": "Logo.files/63aec79793ccdf675cc4d018/binary",
- "managerDisplayName": "Zachary Graham",
- "managerLogin": "zachary",
- "officeAddressCity": "South Elgin",
- "officeAddressCountry": "US",
- "officeAddressLine1": "879 Ocean Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "Illinois",
- "officeAddressZipcode": 60195,
- "organizationName": "I Am Sath",
- "phoneNumber": "847-569-5478",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee",
- "_etag": {
- "$oid": "64ae6c4f48f8a60006766f09"
}, - "employeeType": "Employee",
- "officeAddressPostal": 60174
}, - "commentsOnCertify": true,
- "commentsOnRevoke": true,
- "createdBy": "jerome",
- "createdByDisplayName": "Jerome Fern",
- "createdOn2": "2023-08-01T07:23:53.600Z",
- "description": "This is test atlassian certification",
- "displayUserQuery": "$and:[attribute:statuscondition:equalsvalue:Activeoptions:[ActiveDisabled]]",
- "frequentlyUsedRule": {
- "value": null
}, - "highRiskResources": true,
- "highRiskUsers": true,
- "name": "Atlassian",
- "onlySelected": true,
- "reassignment": true,
- "repeat": "Do not repeat",
- "resourceQuery": "$or:[_id:$oid:64c8a5aefdfcc6b382d82cb2collection:Entitlement_id:$oid:64c8a4ddfdfcc6b382d82267collection:Entitlement_id:$oid:64c8a5aefdfcc6b382d82ccfcollection:Entitlement_id:$oid:64c8a5aefdfcc6b382d82ceccollection:Entitlement_id:$oid:64c8a5aefdfcc6b382d82d0ccollection:Entitlement_id:$oid:64c89886fdfcc6b382d7814ecollection:TargetSystem]",
- "resources": null,
- "searchTags": "Atlassian",
- "selfCertification": true,
- "status2": "Active",
- "triggerCondition": null,
- "type2": "User Access",
- "userCertificationBy": "query",
- "userQuery": "$and:[status:Active]",
- "workflowDescription": "Default Certification Workflow",
- "workflowName": "Certification"
}
Create
This endpoint enables you to create the certificate definition.
Authorizations:
Request Body schema: application/json
name required | string non-empty This is the certificate definition name |
searchTags | string |
description required | string non-empty This is the description of the certificate that you are creating |
type required | string non-empty Enum: "User Access" "Resource Assignment" This is the type of the certificate that you want to create. Certificate definition can be of either User Access or Resource Assignement. |
approverType required | string non-empty Enum: "User" "Role" "None" This is the Approval workflow for the certificate definition, which can be either User (a specific individual), Role or none. |
workflowName required | string non-empty This is the worfklow for the certificate. By Default, IDHub provides a workflow for the certificate definition. If you have your own custom workflow for the certificate then you can use that as well. |
workflowDescription | string |
approver | string |
object If the approverType is User, then here you have to enter the entityID of the user, who will approve the certification. | |
status | string |
highRiskUsers | boolean |
userCertificationBy required | string non-empty Enum: "query" "name" Here you select the users for the certificate. You can select the users by either query or the name of the user |
userQuery | string |
displayUserQuery | string |
highRiskResources | boolean |
certificationBy | string |
onlySelected | boolean |
resourceQuery | string |
object This is where you select the resources for the certification. Here you have to enter the entityID of the resource, which you can fetch from the search catalog endpoint. | |
certifierType required | string non-empty Enum: "User" "Role" "Benefeciary's Manager" "Resource owner" Here you have to select the certifier for the certificate. The certifier can be individual user, role, benefeciary's manager or resource owner. |
certifier | string |
certifierDisplayName | string |
certifierToggle | string |
repeat required | string non-empty This is if you want to repeat the certificate run |
object Here you have to specify the entityID of the user, if the certifierType is user. You can fetch the entityID from the search catalog. | |
commentsOnCertify | boolean |
commentsOnRevoke | boolean |
reassignment | boolean |
selfCertification | boolean |
automaticEscalation | boolean |
certificationReminderEmail | boolean |
alternateCertifierToggle | string |
alternateCertifierUser | string |
alternateCertifierRole | string |
alternateCertifierType | string |
alternateCertifier required | string non-empty Enum: "User's Manager" "Role" "User" This is the alternate certififer for the certificate definition. By default, the alternate certifier is the user's manager. |
triggerCondition | string |
object | |
certificationDurationType | string non-empty Enum: "days" "months" "years" Here you specify the duration of the certificate |
certificationDuration | string |
required | object |
createdBy | string |
createdOn | string <date-time> |
createdByDisplayName | string |
Responses
Request samples
- Payload
{- "name": "myCert",
- "searchTags": null,
- "description": "myCert",
- "type": "User Access",
- "approverType": "User",
- "workflowName": "Certification",
- "workflowDescription": "Default Certification Workflow",
- "approver": "jerome",
- "workflowUser": {
- "_id": {
- "$oid": "63aec79793ccdf675cc4d018"
}, - "IDM": "IDE",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:23.077Z",
- "department": "HR",
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "entitlements": null,
- "firstName": "Jerome",
- "homeAddressCity": "South Elgin",
- "homeAddressCountry": "US",
- "homeAddressLine1": "879 Ocean Drive",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60174,
- "isAdministrator": true,
- "jobTitle": "HR Director",
- "lastName": "Fern",
- "location": "United States",
- "login": "jerome",
- "logoURL": "Logo.files/63aec79793ccdf675cc4d018/binary",
- "managerDisplayName": "Zachary Graham",
- "managerLogin": "zachary",
- "officeAddressCity": "Schaumburg",
- "officeAddressCountry": "US",
- "officeAddressLine1": "2468 Hiddenview Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "IL",
- "officeAddressZipcode": 60195,
- "organizationName": "I Am Sath",
- "phoneNumber": "847-569-5478",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee"
}, - "status": "Active",
- "highRiskUsers": true,
- "userCertificationBy": "query",
- "userQuery": "$and:[status:Active]",
- "displayUserQuery": "$and:[attribute:statuscondition:equalsvalue:Activeoptions:[ActiveDisabled]]",
- "highRiskResources": true,
- "certificationBy": "manually",
- "onlySelected": true,
- "resourceQuery": "$or:[_id:$oid:63aec1a88773337a0e61405acollection:Role]",
- "resources": {
- "_id": {
- "$oid": "63aec1a88773337a0e61405a"
}, - "collection": "Role",
- "name": "Access Manager"
}, - "certifierType": "User",
- "certifier": "jerome",
- "certifierDisplayName": "Jerome Fern",
- "certifierToggle": "user",
- "repeat": "Do not repeat",
- "certifyUser": {
- "_id": {
- "$oid": "63aec79793ccdf675cc4d018"
}, - "IDM": "IDE",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:23.077Z",
- "department": "HR",
- "displayName": "Jerome Fern",
- "employeeNumber": "IAMSATHE026",
- "entitlements": null,
- "firstName": "Jerome",
- "homeAddressCity": "South Elgin",
- "homeAddressCountry": "US",
- "homeAddressLine1": "879 Ocean Drive",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60174,
- "isAdministrator": true,
- "jobTitle": "HR Director",
- "lastName": "Fern",
- "location": "United States",
- "login": "jerome",
- "logoURL": "Logo.files/63aec79793ccdf675cc4d018/binary",
- "managerDisplayName": "Zachary Graham",
- "managerLogin": "zachary",
- "officeAddressCity": "Schaumburg",
- "officeAddressCountry": "US",
- "officeAddressLine1": "2468 Hiddenview Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "IL",
- "officeAddressZipcode": 60195,
- "organizationName": "I Am Sath",
- "phoneNumber": "847-569-5478",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee"
}, - "commentsOnCertify": true,
- "commentsOnRevoke": true,
- "reassignment": true,
- "selfCertification": true,
- "automaticEscalation": true,
- "certificationReminderEmail": true,
- "alternateCertifierToggle": "manager",
- "alternateCertifierUser": null,
- "alternateCertifierRole": null,
- "alternateCertifierType": null,
- "alternateCertifier": "$manager",
- "triggerCondition": null,
- "frequentlyUsedRule": {
- "value": "User Department Change"
}, - "certificationDurationType": "days",
- "certificationDuration": 1,
- "_id": {
- "$oid": "657c2677b4feb77fdd00ca48"
}, - "createdBy": "jerome",
- "createdOn": "2023-12-15T10:13:03.408Z",
- "createdByDisplayName": "Jerome Fern"
}
Response samples
- 200
true
Run
This endpoint enables you to run the certificate. You will need the cert definition ID to run the certificate, which you can get from the fetch certificate endpoint.
Authorizations:
path Parameters
id | string Example: 63aed43793ccdf675cc58246 This is the certificate definition ID of the certificate that you want to run. |
Request Body schema: application/json
object | |
object |
Responses
Request samples
- Payload
{- "impactObject": {
- "certifierCount": 1,
- "resourceCount": 3,
- "resourceList": {
- "IDM": "IDE",
- "ITOwner": "travis",
- "_id": "63aee4dc93ccdf675cc63be7",
- "approvalWorkflow": "Group Approval",
- "approvalWorkflowDisplayName": "Group Approval",
- "approver1": "Approval Group 1",
- "approver2": "Approval Group 2",
- "businessOwner": "spencer",
- "collection": "Entitlement",
- "createdOn": "2022-12-30T13:17:16.297Z",
- "description": "View and create documents.",
- "disabled": true,
- "displayName": "Docusign Standard User",
- "isCertifiable": null,
- "isRequestable": true,
- "members": {
- "IDM": "IDE",
- "_id": "63aec79393ccdf675cc4ccf4",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:19.430Z",
- "department": "Sales",
- "displayName": "Aaron King",
- "employeeNumber": "IAMSATHE008",
- "entitlements": null,
- "firstName": "Aaron",
- "homeAddressCity": "Arlington Heights",
- "homeAddressCountry": "US",
- "homeAddressLine1": "2862 Derek Drive",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60005,
- "jobTitle": "Inside Sales Representative",
- "lastName": "King",
- "location": "United States",
- "login": "aaron",
- "logoURL": "Logo.files/63aec79393ccdf675cc4ccf4/binary",
- "managerDisplayName": "Spencer Hunter",
- "managerLogin": "spencer",
- "officeAddressCity": "Schaumburg",
- "officeAddressCountry": "US",
- "officeAddressLine1": "2468 Hiddenview Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "IL",
- "officeAddressZipcode": 60175,
- "organizationName": "I Am Sath",
- "phoneNumber": "847-392-2610",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee"
}, - "name": "Docusign Standard User",
- "performer": "Manual Fulfiller",
- "requestable": true,
- "riskLevel": "medium",
- "searchTags": "Sales Finance",
- "targetSystemDisplayName": "Docusign",
- "targetSystemId": "63aee4dc93ccdf675cc63bd2",
- "targetSystemName": "Docusign",
- "workflowRequestFormId": "6085f65f432acc2a019f1fbe"
}, - "taskCount": 3,
- "userCount": 27,
- "userList": {
- "IDM": "IDE",
- "_id": "63aec79893ccdf675cc4d124",
- "collection": "User",
- "createDate": "11-11-2022",
- "createdOn": "2022-12-30T11:12:24.460Z",
- "department": "CO",
- "displayName": "Zachary Graham",
- "employeeNumber": "IAMSATHE019",
- "entitlements": null,
- "firstName": "Zachary",
- "homeAddressCity": "Mount Prospect",
- "homeAddressCountry": "US",
- "homeAddressLine1": "985 Lively Lane",
- "homeAddressLine2": "Suite 52",
- "homeAddressState": "Illinois",
- "homeAddressZipcode": 60056,
- "isAdministrator": true,
- "jobTitle": "CTO",
- "lastName": "Graham",
- "location": "United States",
- "login": "zachary",
- "logoURL": "Logo.files/63aec79893ccdf675cc4d124/binary",
- "managerDisplayName": "Derrick Henry",
- "managerLogin": "derrick",
- "officeAddressCity": "Schaumburg",
- "officeAddressCountry": "US",
- "officeAddressLine1": "2468 Hiddenview Drive",
- "officeAddressLine2": "H.No. 44AE",
- "officeAddressState": "IL",
- "officeAddressZipcode": 60195,
- "organizationName": "I Am Sath",
- "phoneNumber": "630-156-2546",
- "provisionedDate": "11-11-2022",
- "status": "Active",
- "userType": "Employee"
}
},
}
Response samples
- 200
true
Create Application / Role
Authorizations:
Request Body schema: application/json
entityType | string Type of Entity |
IDM | string |
justification required | string non-empty This is the justification that you have enter for on-boarding this application |
requestType | string |
summary | string |
status | string |
createDate | string <date-time> |
required | object non-empty This is the requester object and contains the details of the requester like requester email and login |
required | object non-empty This is the payload object which is used to on-board the application. |
collection | string |
resolution | string |
object |
Responses
Request samples
- Payload
{- "entityType": "Application",
- "IDM": "IDE",
- "justification": "creating application",
- "requestType": "Catalog",
- "summary": "New Application Request - testag",
- "status": "Draft",
- "createDate": "2023-12-18T13:21:11.421Z",
- "payload": {
- "target-system": {
- "displayName": "testag",
- "searchTags": null,
- "description": "testag",
- "businessOwner": "jerome",
- "ITOwner": "jerome",
- "IDM": "IDE",
- "integrationLevel": "Disconnected",
- "connectorURL": null,
- "connectorCredentials": null,
- "authenticationType": null,
- "trustedReconciliation": true,
- "reconciliationSchedule": null,
- "approvalWorkflow": "Auto Approval",
- "applicationURL": null,
- "approvalWorkflowDisplayName": "Auto Approval",
- "performer": "Access Manager",
- "riskLevel": "low",
- "isRequestable": true,
- "isCertifiable": null,
- "reason": "creating application",
- "form": {
- "0": {
- "dataType": "datetime",
- "isAccountName": true,
- "isMultiValue": true,
- "isReconKey": true,
- "isRequired": true,
- "isVisible": true,
- "isDisabled": true,
- "matchingAttribute": null,
- "name": "accessRevokeDate",
- "syncDirection": "no-sync"
}, - "1": {
- "name": "User Login",
- "dataType": "string",
- "syncDirection": "no-sync",
- "matchingAttribute": "login",
- "isRequired": true,
- "isReconKey": true,
- "isAccountName": true,
- "isMultiValue": true,
- "isVisible": true,
- "isDisabled": true
}
}, - "schedule": {
- "repeat": "Do not repeat"
}, - "reconScheduleEndDate": null,
- "entitlements": {
- "displayName": "testUser",
- "name": "testUser",
- "searchTags": null,
- "isCertifiable": null,
- "description": "this is test ent",
- "type": null,
- "approvalWorkflow": "Auto Approval",
- "approvalWorkflowDisplayName": "Auto Approval",
- "performer": "Access Manager",
- "riskLevel": "low",
- "isRequestable": true,
- "form": {
- "name": "accessRevokeDate",
- "description": null,
- "dataType": "datetime",
- "required": true,
- "options": null
}
}, - "logoURL": null,
- "connectionCredentials": null,
- "connectorUserName": null,
- "connectorPassword": null,
- "requestFormName": null,
- "requestFormId": null,
- "reconSchedule": null,
- "workflowRequestFormId": null,
- "name": "testag",
- "entitlementChanges": {
- "add": {
- "displayName": "testUser",
- "name": "testUser",
- "searchTags": null,
- "isCertifiable": null,
- "description": "this is test ent",
- "type": null,
- "approvalWorkflow": "Auto Approval",
- "approvalWorkflowDisplayName": "Auto Approval",
- "performer": "Access Manager",
- "riskLevel": "low",
- "isRequestable": true,
- "form": {
- "name": "accessRevokeDate",
- "description": null,
- "dataType": "datetime",
- "required": true,
- "options": null
}
}, - "update": null,
- "delete": null
}
}, - "type": "create"
}, - "collection": "UserRequest",
- "resolution": "Initiated",
- "_id": {
- "$oid": "658046e3994114206f721849"
}
}
Response samples
- 200
true