Document toolboxDocument toolbox

Sailpoint

[ 1 Connect Salesforce with Devo SOAR ] [ 1.1 List Access Profiles ] [ 1.1.1 Input Field ] [ 1.1.2 Output ] [ 1.2 Get Access Profile ] [ 1.2.1 Input Field ] [ 1.2.2 Output ] [ 1.3 List Access Profile's Entitlements ] [ 1.3.1 Input Field ] [ 1.3.2 Output ] [ 1.4 List Accounts ] [ 1.4.1 Input Field ] [ 1.4.2 Output ] [ 1.5 Get Account Details ] [ 1.5.1 Input Field ] [ 1.5.2 Output ] [ 1.6 Delete Account ] [ 1.6.1 Input Field ] [ 1.6.2 Output ] [ 1.7 List Account Activities ] [ 1.7.1 Input Field ] [ 1.7.2 Output ] [ 1.8 Search ] [ 1.8.1 Input Field ] [ 1.8.2 Output ] [ 2 Release Notes ]

The SailPoint Identity Security Cloud Platform is purpose-built for today’s enterprise demands, delivering an intelligent, autonomous identity foundation that securely fuels your business.

Connect Salesforce with Devo SOAR

  1. Navigate to Automations > Integrations.

  2. Search for Sailpoint.

  3. Click Details, then the + icon. Enter the required information in the following fields.

  4. Label: Enter a connection name.

  5. Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.

  6. Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).

  7. Remote Agent: Run this integration using the Devo SOAR Remote Agent.

  8. Tenant: Tenant for the SailPoint API.

  9. Client Id: Client Id for the SailPoint API.

  10. Client Secret: Client secret for the SailPoint API.

  11. After you've entered all the details, click Connect.

List Access Profiles

This API returns a list of Access Profiles.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Params

Jinja-templated JSON containing the params for the SailPoint API. Example: '{"limit": 10,"offset": 20}'

Optional

Output

JSON containing the following items:

{ "result":[ { "id":"2asdfasdfasdfasdf602a3", "name":"TEST User", "description":"Add the TEST", "created":"2021-10-19T19:49:06.886Z", "modified":"2022-11-15T00:59:10.098Z", "enabled":true, "owner":{ "type":"IDENTITY", "id":"2casdfqwerrtyufghjvnmxcvbasd64", "name":"003988" }, "source":{ "id":"2casdfewrtyheyjnmfgnsd59e", "type":"SOME_TYPE", "name":"TEST Directory" }, "entitlements":[ { "id":"2c91asdfwergfgnbbcbesrdfgsdfg1a63", "type":"SOME_TYPE", "name":"EXAMPLE NAME" } ], "requestable":true, "accessRequestConfig":{ "commentsRequired":false, "denialCommentsRequired":false, "approvalSchemes":[ ] }, "revocationRequestConfig":{ "approvalSchemes":[ ] }, "segments":[ ], "provisioningCriteria":null } ], "error":null, "has_error":false }

Get Access Profile

This API returns an Access Profile by its ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Access Profile Id

Jinja-templated text containing the access profile Id for the SailPoint API.

Required

Output

JSON containing the following items:

{ "id":"2asdfasdfasdfasdf602a3", "name":"TEST User", "description":"Add the TEST", "created":"2021-10-19T19:49:06.886Z", "modified":"2022-11-15T00:59:10.098Z", "enabled":true, "owner":{ "type":"IDENTITY", "id":"2casdfqwerrtyufghjvnmxcvbasd64", "name":"003988" }, "source":{ "id":"2casdfewrtyheyjnmfgnsd59e", "type":"SOME_TYPE", "name":"TEST Directory" }, "entitlements":[ { "id":"2c91asdfwergfgnbbcbesrdfgsdfg1a63", "type":"SOME_TYPE", "name":"EXAMPLE NAME" } ], "requestable":true, "accessRequestConfig":{ "commentsRequired":false, "denialCommentsRequired":false, "approvalSchemes":[ ] }, "revocationRequestConfig":{ "approvalSchemes":[ ] }, "segments":[ ], "error":null, "has_error":false }

List Access Profile's Entitlements

This API lists the Entitlements associated with a given Access Profile.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Access Profile Id

Jinja-templated text containing the access profile Id for the SailPoint API.

Required

Params

Jinja-templated JSON containing the params for the SailPoint API. Example: '{"limit": 10,"offset": 20}'

Optional

Output

JSON containing the following items:

{ "result":[ { "id":"2c9asdfwae4frqwefasd63", "name":"SOME_NAME", "attribute":"memberOf", "value":"SOME_VALUE", "sourceSchemaObjectType":"group", "description":null, "privileged":false, "cloudGoverned":false, "created":"2021-09-08T22:07:29.352Z", "modified":"2023-04-12T09:03:07.461Z", "source":{ "id":"2cqewoirfhjpqiulwfhas;djf7659e", "type":"SOURCE", "name":"TEST Directory" }, "attributes":{ }, "segments":[ ], "directPermissions":[ ] } ], "error":null, "has_error":false }

List Accounts

This API returns a list of accounts. A token with ORG_ADMIN authority is required to call this API.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Params

Jinja-templated JSON containing the params for the SailPoint API. Example: '{"limit": 10,"offset": 20}'

Optional

Output

JSON containing the following items:

Get Account Details

This API returns the details for a single account based on the ID. A token with ORG_ADMIN authority is required to call this API.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Account Id

Jinja-templated text containing the account Id for the SailPoint API.

Required

Output

JSON containing the following items:

Delete Account

This API submits an account delete task and returns the task ID. This operation can only be used on Flat File Sources. Any attempt to execute this request on the source of other type will result in an error response with a status code of 400. A token with ORG_ADMIN authority is required to call this API.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Account Id

Jinja-templated text containing the account Id for the SailPoint API.

Required

Output

JSON containing the following items:

List Account Activities

This gets a collection of account activities that satisfy the given query parameters.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Params

Jinja-templated JSON containing the params for the SailPoint API. Example: '{"limit": 10,"offset": 20}'

Optional

Output

JSON containing the following items:

``` {json}{ "result":[ { "name":"8523uo4yg5iu234y5g3i4h5ba", "executionStatus":"COMPLETED", "targetIdentitySummary":{ "id":"2894537gh2380947ty298374rty", "name":"TEST ABC" }, "clientMetadata":null, "items":[ { "id":"5238974ytr293874r9", "name":"5828347yt203874ry023498ru3b69", "requested":"2023-05-23T12:33:01.456Z", "approvalStatus":"PENDING", "provisioningStatus":"FINISHED", "requesterComment":null, "reviewerIdentitySummary":null, "reviewerComment":null, "operation":"REMOVE", "attribute":"assignedRoles", "value":"UltiPro - active [cloudLifecycle-16234532452345", "nativeIdentity":null, "sourceId":"IdentityNow", "accountRequestInfo":null, "clientMetadata":null, "removeDate":null } ], "warnings":null, "completionStatus":"SUCCESS", "errors":null, "modified":"2023-05-23T12:33:01.626Z", "has_error":false, "id":"85239408fj23948urt08273yh4r5fa", "requesterIdentitySummary":null, "error":null, "completed":"2023-05-23T12:33:01.622Z", "type":"Identity Refresh", "created":"2023-05-23T12:33:01.462Z" } ] "has_error":false, "error":null }

Search

Performs a search with the provided query and returns a matching result collection.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input Name

Description

Required

Input Name

Description

Required

Params

Jinja-templated JSON containing the params for the SailPoint API. Example: '{"limit": 10,"offset": 20}'

Optional

Body

Jinja-templated JSON containing the body for the SailPoint API. Example: '{"indices": ["identities"],"queryType": "SAILPOINT","queryVersion": "5.2","query": {"query": "name:a*","fields": ["name"],"timeZone": "America/Chicago","innerHit": {"query": "source.name:\"Active Directory\"","type": "access"}}}'

Required

Output

JSON containing the following items:

{json}{ "result":[ { "privileged":false, "displayName":"513", "name":"513", "standalone":true, "id":"2c911ui2y34giu123yg4db44d1", "source":{ "name":"Active Directory", "id":"21i2ou35hg138o424e9" }, "attribute":"primaryGroupID", "type":"ENTITLEMENT", "value":"678", "_type":"access", "_originalType":"identity", "_version":"v7" } ], "error":null, "has_error":false }

Release Notes

  • v1.1.0 - Added 6 new actions: List Accounts,Get Account Details,Delete Account,List Account Activities,Get Account Activity and Search

  • v1.0.3 - Added 3 new actions: List Access Profiles, Get Access Profile and List Access Profile's Entitlements