Just over 18 months ago I wrote this post on using PowerShell and oAuth to access the Azure AD Reports API to retrieve MIM Hybrid Report data. This week I went to re-use that for Azure Password Reset Reporting and found out that the API had been deprecated.… keep reading
Granfeldt PowerShell Management Agent Schema HRESULT: 0x80231343 Error
Yesterday I was modifying the Schema configuration on a Granfeldt PowerShell Management Agent on a Microsoft Identity Manager 2016 SP1 Server.
I was changing the Anchor attribute for a different attribute and on attempting to refresh the schema or view the configuration I got the following error;
Unable to retrieve schema.… keep reading
Using SailPoint IdentityNow v3 API’s with PowerShell
Update: Oct 2019. Leveraging the SailPoint IdentityNow API's is now easier using the SailPoint IdentityNow PowerShell Module. Also see this post for how to generate v2 and v3 API credentials.
The SailPoint IdentityNow SaaS product is evolving. I’ve previously posted about integrating with the IdentityNow API’s using PowerShell;
- Leveraging v1, v2 and non-Published SailPoint IdentityNow API’s with PowerShell
- Integrating with SailPoint IdentityNow Private (v1) API’s using PowerShell
- Reporting on SailPoint IdentityNow Identities using the ‘Search’ (Beta) API and PowerShell
IdentityNow now has v3 API’s which are essentially the v2 and non-Published API’s with the added benefit of being able to obtain an oAuth token from a new oAuth Token endpoint.… keep reading
Enabling Requestable Roles in SailPoint IdentityNow using PowerShell
Update: Oct 2019. IdentityNow Roles can be easily managed using the SailPoint IdentityNow PowerShell Module.
Recently I wrote this post about Retrieving, Creating, and Managing SailPoint IdentityNow Roles using PowerShell.
Last week SailPoint enhanced Roles with the ability to request them.… keep reading
Using Invoke-WebRequest calls within a Granfeldt PowerShell MA for Microsoft Identity Manager
If you use PowerShell extensively you should be familiar with the Invoke-RestMethod cmdlet and the ability for PowerShell to call API’s and receive information. The great thing about Invoke-RestMethod is the inbuilt conversion of the results to PowerShell Objects. However there are times when you need the raw response (probably because you are trying to bend things in directions they aren’t supposed to be; story of many of my integrations).… keep reading
Microsoft Graph and the $whatIf option
What we know today as the Microsoft Graph has evolved over the last few years from a number of different API’s that were developed by different product teams within Microsoft (e.g Azure AD, Office 365, Outlook). That doesn’t mean the old ones have gone away, but it does mean that we can connect to the Microsoft Graph API and leverage the API’s we used to interface with independently.… keep reading
Searching and Returning all Objects/Users from a SailPoint IdentityNow Source
Update: Oct 2019. Searching Sources can be easily be performed using the SailPoint IdentityNow PowerShell Module.
There are times when need to get an extract of all objects on an IdentityNow Source. Just a particular Source, not the object from the Identity Cube with attributes contributed from multiple sources.… keep reading
Retrieving SailPoint IdentityNow Certification Reports using PowerShell
Update: Oct 2019. Certification Campaign Reports can be easily managed using the SailPoint IdentityNow PowerShell Module.
This is the third and probably last post in the Certifications by API series. The first post detailed retrieving and searching campaigns, the second post detailed creating and starting campaigns.… keep reading
Creating SailPoint IdentityNow Certification Campaigns using PowerShell
Update: Oct 2019. Certification Campaigns can be easily managed using the SailPoint IdentityNow PowerShell Module.
This is the second post in the Certifications by API series. The last post detailed searching and retrieving campaigns. If you haven’t read that, check that out as it will give you the background for this one.… keep reading
Accessing SailPoint IdentityNow Certification Campaigns using PowerShell
Update: Oct 2019. Certification Campaigns can be easily managed using the SailPoint IdentityNow PowerShell Module.
This is the first post in a series covering SailPoint IdentityNow Certifications. Specifically listing and returning campaigns, creating campaigns and accessing campaign reports. This post will show Listing Active and Completed Campaigns, Searching for a specific Campaign and returning the full details for a Campaign.… keep reading

