SQL CreateIdentity

Stored procedure

• Identity attributes, parameter names are taken from target_system_property_name in the system_identity_type_attribute table

• IDENTITY_ID
  Unique identifier of the identity from the target system

Creates the user in the target system

SQL GetIdentityParameters

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• SQL replacements for identity attributes: {target_system_property_name}

• All identity parameters from the SELECT query

Returns all the user parameters of a user

SQL CheckIdentityExists

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• Result row(s) or nothing

Checks if the user in the target system exists, if rows are returned → true, else false

SQL FindObjectIdentifiersByAttributes

Select query (function)

• SQL replacement for system identity type: {SYSTEM_IDENTITY_TYPE_ID}

• SQL replacements for attribute values: {target_system_property_name}

• Result rows with column name IDENTITY_ID

Finds object identifiers of users by their attribute values.

Returns all the object identifiers of users where the attributes values were found

SQL UpdateIdentity

(→ calls SQL GetIdentityParameters)

Stored procedure

• Identity identifier: IDENTITY_ID

• Identity attributes, parameter names are taken from target_system_property_name in the system_identity_type_attribute table

-

Updates a user with the attribute values

SQL DeleteIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Deletes a user by their identity identifier

SQL ValidateCredentials

Not implemented

-

-

-

SQL IsIdentityActivate

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• SQL replacements for identity attributes: {target_system_property_name}

• Result row(s) or nothing

Checks if the user in the target system is active, if rows are returned → true, else false

SQL ActivateIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Activates a user in the target system

SQL DeactivateIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Deactivates a user in the target system

SQL SetIdentityPassword

Not implemented

-

-

-

SQL IsPropertyValueUnique

Select query (function)

• SQL replacement for unique property: {UNIQUEPROPERTY}

• SQL replacement for unique property value: {UNIQUEPROPERTYVALUE}

• Result row(s) or nothing

Checks if a property value is unique in the target system.

There are 3 cases that gets checked to determine if the property value is unique:

• Returing more than one row:

  • Not unique → false

• Returing 1 row:

  • If property value is on the user with the given user object id → Is unique → true

  • If the property value is on another user → Is unique → false

• Returning now rows:

  • Is unique → true

SQL CreateResource

Stored procedure

• Resource attributes, parameter names are taken from target_system_property_name in the system_resource_type_attribute table

• RESOURCE_ID
  Unique identifier of the resource from the target system

Creates the resource in the target system

SQL GetResourceParameters

Select query (function)

• SQL replacement for resource identifier: {RESOURCE_ID}

• SQL replacements for resource attributes: {target_system_property_name}

• All resource parameters from the SELECT query

Returns all the resource parameters of a resource

SQL CheckResourceExists

Select query (function)

• SQL replacement for resource identifier: {RESOURCE_ID}

• SQL replacements for resource attributes: {target_system_property_name}

• Result row(s) or nothing

Checks if the resource in the target system exists, if rows are returned → true, else false

SQL UpdateResource

(→ calls SQL GetResourceParameters)

Stored procedure

• Resource identifier: RESOURCE_ID

• Resource attributes, parameter names are taken from target_system_property_name in the system_resource_type_attribute table

-

Updates a resource with the attribute values

SQL DeleteResource

Stored procedure

• Resource identifier: RESOURCE_ID

-

Deletes a resource in the target system

SQL GetResources

Select query (function)

• SQL replacement for system resource type: {SYSTEM_RESOURCE_TYPE_ID}

• SQL replacements for the search value: {textPattern}

• SQL replacements for maximun amount of results returned: {maxResults}

• Result rows with the resource identifiers that were found with the column name RESOURCE_ID

• Recommended to send back a column named RESOURCE_DISPLAYNAME to represent the readable name of the resource

Returns resources of a specific system resource type, filtered by the text pattern and limited by the max results value

SQL IsResourcePropertyValueUnique

Select query (function)

• SQL replacement for unique property: {UNIQUEPROPERTY}

• SQL replacement for unique property value: {UNIQUEPROPERTYVALUE}

• SQL replacement for system resource type: {SYSTEM_RESOURCE_TYPE_ID}

• Result row(s) or nothing

Checks if a property value is unique in the target system.

There are 3 cases that gets checked to determine if the property value is unique:

• Returing more than one row:

  • Not unique → false

• Returing 1 row:

  • If property value is on the user with the given user object id → Is unique → true

  • If the property value is on another user → Is unique → false

• Returning now rows:

  • Is unique → true

Function (task feature)

Supported

create/delete identities

provisioning identities 

update identities          

provisioning identity updates   

deprovision identities  

cleanup of inactive identities active

check password changed active

Function (task feature)

Supported

create/delete resources

provision resources     

update resources         

provisioning resource changes 

deprovisioning resources         

provisioning resource allocations         

deprovisioning resource allocations     

provisioning resources-resource allocations     

-

Deprovisioning resource resource allocations   

-

Function (task feature)

Supported

Is available in the expected/actual comparison log          

-

Clean up expected/actual

-

Read back user account properties

Resource identity assignments Target system cleanup  

-

Resource-resource assignments Target system cleanup 

-