SQL CreateIdentity

Stored procedure

• Identity attributes, parameter names are taken from target_system_property_name in the system_identity_type_attribute table

• IDENTITY_ID
  Unique identifier of the identity from the target system

Creates the user in the target system

SQL GetIdentityParameters

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• SQL replacements for identity attributes: {target_system_property_name}

• All identity parameters from the SELECT query

Returns all the user parameters of a user

SQL CheckIdentityExists

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• Result row(s) or nothing

Checks if the user in the target system exists, if rows are returned → true, else false

SQL FindObjectIdentifiersByAttributes

Select query (function)

• SQL replacement for system identity type: {SYSTEM_IDENTITY_TYPE_ID}

• SQL replacements for attribute values: {target_system_property_name}

• Result rows with column name IDENTITY_ID

Finds object identifiers of users by their attribute values.

Returns all the object identifiers of users where the attributes values were found

SQL UpdateIdentity

(→ calls SQL GetIdentityParameters)

Stored procedure

• Identity identifier: IDENTITY_ID

• Identity attributes, parameter names are taken from target_system_property_name in the system_identity_type_attribute table

-

Updates a user with the attribute values

SQL DeleteIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Deletes a user by their identity identifier

SQL ValidateCredentials

Not implemented

-

-

-

SQL IsIdentityActivate

Select query (function)

• SQL replacement for identity identifier: {IDENTITY_ID}

• SQL replacements for identity attributes: {target_system_property_name}

• Result row(s) or nothing

Checks if the user in the target system is active, if rows are returned → true, else false

SQL ActivateIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Activates a user in the target system

SQL DeactivateIdentity

Stored procedure

• Identity identifier: IDENTITY_ID

-

Deactivates a user in the target system

SQL SetIdentityPassword

Not implemented

-

-

-

SQL IsPropertyValueUnique

Select query (function)

• SQL replacement for unique property: {UNIQUEPROPERTY}

• SQL replacement for unique property value: {UNIQUEPROPERTYVALUE}

• Result row(s) or nothing

Checks if a property value is unique in the target system.

There are 3 cases that gets checked to determine if the property value is unique:

• Returing more than one row:

  • Not unique → false

• Returing 1 row:

  • If property value is on the user with the given user object id → Is unique → true

  • If the property value is on another user → Is unique → false

• Returning now rows:

  • Is unique → true

SQL CreateResource

Stored procedure

• Resource attributes, parameter names are taken from target_system_property_name in the system_resource_type_attribute table

• RESOURCE_ID
  Unique identifier of the resource from the target system

Creates the resource in the target system

SQL GetResourceParameters

Select query (function)

• SQL replacement for resource identifier: {RESOURCE_ID}

• SQL replacements for resource attributes: {target_system_property_name}

• All resource parameters from the SELECT query

Returns all the resource parameters of a resource

SQL CheckResourceExists

Select query (function)

• SQL replacement for resource identifier: {RESOURCE_ID}

• SQL replacements for resource attributes: {target_system_property_name}

• Result row(s) or nothing

Checks if the resource in the target system exists, if rows are returned → true, else false

SQL UpdateResource

(→ calls SQL GetResourceParameters)

Stored procedure

• Resource identifier: RESOURCE_ID

• Resource attributes, parameter names are taken from target_system_property_name in the system_resource_type_attribute table

-

Updates a resource with the attribute values

SQL DeleteResource

Stored procedure

• Resource identifier: RESOURCE_ID

-

Deletes a resource in the target system

SQL GetResources

Select query (function)

• SQL replacement for system resource type: {SYSTEM_RESOURCE_TYPE_ID}

• SQL replacements for the search value: {textPattern}

• SQL replacements for maximun amount of results returned: {maxResults}

• Result

• rows with the resource identifiers that were found with the column name RESOURCE_ID

• Recommended to send back a column named RESOURCE_DISPLAYNAME to represent the readable name of the resource

Returns resources of a specific system resource type, filtered by the text pattern and limited by the max results value

SQL IsResourcePropertyValueUnique

Select query (function)

• SQL replacement for unique property: {UNIQUEPROPERTY}

• SQL replacement for unique property value: {UNIQUEPROPERTYVALUE}

• SQL replacement for system resource type: {SYSTEM_RESOURCE_TYPE_ID}

• Result row(s) or nothing

Checks if a property value is unique in the target system.

There are 3 cases that gets checked to determine if the property value is unique:

• Returing more than one row:

  • Not unique → false

• Returing 1 row:

  • If property value is on the user with the given user object id → Is unique → true

  • If the property value is on another user → Is unique → false

• Returning now rows:

  • Is unique → true

System Connector task features

Supported

Create / delete identities

✅

Provisioning identities 

✅

Update identities          

✅

Provisioning identity updates   

✅

Deprovision identities  

✅

Cleanup of inactive identities active     

✅

Check password changed active

✅

System Connector task features

Supported

Create/delete resources

✅

Provision resources     

✅

Update resources         

✅

Provisioning resource changes 

✅

Deprovisioning resources         

✅

Provisioning resource allocations         

✅

Deprovisioning resource allocations     

✅

Provisioning resources-resource allocations     

-

Deprovisioning resource resource allocations   

-

System Connector task features

Supported

In the should-actual Log available    

-

Should be - Actually is - cleanup

-

Read back account properties

✅

Resource identity member target system clean up

-

Resource resource member target system clean up

-