SailPoint IIQ - Generic Java Native Methods

// Get Oauth-2 client id and secret key base 64 encoded value 
import sailpoint.service.oauth.OAuthClientDTO;
import sailpoint.service.oauth.OAuthClientService;
import java.util.Base64;
import java.util.List;

public String getTokenValue(SailPointContext context, String clientName) {
OAuthClientService oAuthClientService = new OAuthClientService(context);
List<OAuthClientDTO> OAuthClientDTOList = oAuthClientService.getClientDTOs();
log.info("OAuthClientDTOList - " + OAuthClientDTOList);
String base64TokenKey = "";
if(null != OAuthClientDTOList) {
for(OAuthClientDTO obj : OAuthClientDTOList) {
if(clientName.equalsIgnoreCase(obj.getName())) {
log.info("dto.getClientId() - " + obj.getClientId());
log.info("dto.getSecret() - " + obj.getSecret());
base64TokenKey = "Basic " + Base64.getEncoder().encodeToString((obj.getClientId() + ":" + obj.getSecret()).getBytes());
log.info("base64TokenKey - " + base64TokenKey);
}
}
}    
return base64TokenKey;
}


// Example to use ObjectUtil generic class to get identity and workgroup information - OOTB 
Utility class providing methods to load and analyze SailPointObject subclasses.

Identity idm = ObjectUtil.getIdentityOrWorkgroup(context, workGroupName);
myLogs.info("getIdentityOrWorkgroup(): " + idm);

List<String> listMembers = new ArrayList<>();
// Properties name (Columns/Attribute name) values
List<String> properties = Arrays.asList(Constants.NAME);
Iterator<Object[]> objIterator = ObjectUtil.getWorkgroupMembers(context, idm, properties);
LOGGER.info("objIterator getWorkgroupMembers() : " + objIterator);
// Iterate through the iterator and add each element to the list
while (objIterator.hasNext()) {
Object[] element = objIterator.next();
if(null!=element) {
listMembers.add((String) element[0]);
}
}
myLogs.info("my list of Members : " + listMembers);









Comments

Post a Comment

Popular posts from this blog

SailPoint IIQ - Installation Steps

Image
How to Install and Deploy SailPoint IdentityIQ in Local Windows Machine 1]  Prerequisite tools checklist: Use below credential during MySQL database installation setup (At step 2): MySQL super user access needed for running schema scripts  UID          root Password root123 This is same password which you have set during installation of MySQL Download and install below softwares Oracle or Open JDK - Version 1.8  ( https://www.java.com/en/download    or    https://openjdk.org/projects/jdk8/ ) MySQL database - Version 8x  ( https://dev.mysql.com/downloads/installer/ ) Apache Tomcat Server - Version 9x  ( https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.56/bin/apache-tomcat-9.0.56.zip ) Set JAVA_HOME ,  JRE_HOME  and  MY_SQL  path in environment variable 2]  Deploy Sailpoint war/jars & launch SailPoint IQ application: Steps to follow for deploying SailPoint jars/wars and Launch Sai...
Read more

NIST (National Institute of Standards and Technology) Controls

NIST (National Institute of Standards and Technology) provides comprehensive guidance for improving Identity and Access Management (IAM) systems. These guidelines are part of broader cybersecurity frameworks and publications that help organizations secure their digital identities and access controls. Here's an overview of the key NIST controls and guidelines relevant to IAM: 1. NIST SP 800-53: Security and Privacy Controls for Information Systems and Organizations This document provides a catalog of security and privacy controls for federal information systems and organizations. It covers a wide range of topics, including IAM. Relevant control families include: AC (Access Control) : This family of controls deals directly with access to information systems and includes: AC-1: Access Control Policy and Procedures AC-2: Account Management AC-3: Access Enforcement AC-4: Information Flow Enforcement AC-5: Separation of Duties AC-6: Least Privilege AC-7: Unsuccessful Login Attempts AC-1...
Read more

SailPoint IIQ - Database Tables

#User master table, consist of firstname, lastname, email etc. select  * from spt_identity #Entitlement select * from spt_identity_entitlement #Role select * from spt_bundle #Application table details like HR, Finance, PAM application etc. select * from  spt_application # Managed attributes details like type entitlement, group etc. select * from  spt_managed_attribute # Profiles related table select * from  spt_profile select * from  spt_profile_constraints select * from spt_bundle #Request manage access table select * from spt_identity_request_item #Access request table - with completion status, requester, approver etc. select * from  spt_identity_request #WorkItems select * from spt_work_item #Plugin listing table select * from  spt_plugin # Password policies select * from  spt_password_policy #Capabilities select * from  spt_capability select * from  spt_capability_rights select * from  spt_capability_children #Request Detai...
Read more