ISC-File Upload Utility

 Reference:-

https://developer.sailpoint.com/discuss/t/file-upload-utility/18181

Which actions or operations cannot be performed through the ISC UI?

 # Optimization

# Lifecycle State deletion

Lifecycle State

# Lifecycle states can be managed through the UI; however, deletion of lifecycle states is not supported via the UI. Deletion can be performed using VS Code or Postman.

# Lifecycle states can be validated through Access History (up to 18 months) or via Events.

# All lifecycle states can be implemented within a single transform.

Optimization

 

Account Aggregation

 

ISC Postman Set up

 High-Level Steps:-

# Download and install the postman.

# Navigate to the home icon and click on a Workspace.

# Click on a create Workspace.

# Create an Environment

•     Configure the variables (clientId, clientSecret, tenant) in the Environment.

# Create a Collection

•     Configure the variable (domain) in the collection.
•     Configure the Authorization for child API's to connect ISC tenant
•     Select the Authentication type as OAuth 2.0

# Configure New Token

•         Select the Grant Type as Client Credentials
•         Provide the Access Token URL : https://{{tenant}}.api.identitynow-demo.com/oauth/token
•         Configure the tenant using an Environment variable
•         Reference    :    https://developer.sailpoint.com/docs/api/authentication
•         https://[tenant].api.identitynow.com/oauth/token
•         Configure the Client ID using an Environment variable
•         Configure the Client Secret using an Environment variable

# Click on Get New Access Token, then select Use Token to enable usage for child APIs.

ISC VSC Code Set up

High-Level Steps:-

# Download and install the Visual Studio Code (VSC).

# Navigate to the Extensions icon, located at the center of the left-hand panel.

# Search with "sailpoint identity sec" and look for the author Yannick.

# Open the "SailPoint Identity Security Cloud for Visual Studio Code" and click on setting icon for install specific version selection.

# Select the version to install - 1. 3. 29

#The ISC tenant will be added automatically; if it is not, restart Visual Studio Code.

# Navigate to the ISC extension icon, click on Add tenant.

# Provide the following details:

    tenant name (Ex: Tenant + domain),

    display name (Ex: Tenant + domain),

    Select the AuthN method as PAT, then provide the clientId & clientSecret.

# The tenant is configured as read-only by default; update the setting to writable for a sandbox environment.

ISC PAT Generation

 High-Level Steps:-

# Login to SailPoint ISC tenant.

# Navigate to your profile/name, it is available on leftside topmost.

# Navigate to Personal Access Tokens

# Click on New token

# Provide the name of the token, remove the expiration date,  and give the scope is sp:scopes:all

# Click on create

# PAT contains Secret and Client ID

Note: 

Any user with admin access to the tenant can create up to 10 tokens.

PAT - Personal Access Token

Sailpoint ISC URL's & Paths

ISC Tenant URL :
https://{{tenant}}.{{domain}}/login/login/?brand=default

ISC Docs:
https://documentation.sailpoint.com/saas/help/index.html

ISC Glossary URL:
https://documentation.sailpoint.com/saas/help/common/glossary.html

ISC Developer Community URL: 
https://developer.sailpoint.com/docs/

ISC Postman Setup URL:
https://developer.sailpoint.com/docs/api/postman-collections
https://www.postman.com/sailpoint/identitynow/overview
Token URL : https://[tenant].api.identitynow.com/oauth/token

ISC API's URL:
https://developer.sailpoint.com/docs/api

Fetch the pending ARs associated with the BR

SELECT

c.Name as AR,

TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (p.created / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "P CREATED DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (p.end_date / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "P END DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (c.created / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "C CREATED DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (c.end_date / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "C CREATED DATE",

c.Name,
c.Value AS BR,
c.approver_name,
C.operation,
c.approval_state,
c.provisioning_state,
c.compilation_status,
c.identity_request_id 

FROM identityiq.spt_identity_request_item c
JOIN identityiq.spt_identity_request p ON p.id = c.identity_request_id

WHERE c.name = 'assignedRoles' AND
(VALUE IN ('IIQ Role', 'ISC Roles'));

Fetch the roles base on Organizational Role

SELECT

br.name AS itr_or_br,
br.type AS itr_br_type,
it.name AS org_role_name,
it.type AS org_type

FROM identityiq.spt_bundle_children r
JOIN identityiq.spt_bundle it ON it.id = r.child
JOIN identityiq.spt_bundle br ON BR.ID = r.bundle

WHERE
it.name = 'ISC IT - Container';