Joining/Matching rules in any Identity and Access Management Solution can make or break an Identity Lifecycle Management implementation. Out of the box SailPoint IdentityNow provides a number of common Identity Attributes that can be used for Correlation rules (joining/matching) from Identity Sources (connected systems).… keep reading
Building SailPoint IdentityNow Azure AD Source Filters
When you have a large Azure AD tenant it is likely that you want to scope your SailPoint IdentityNow Source based on the different type of identities it contains. Using the Filtering and Scoping section of the Azure AD Source Configuration Guide from Compass I first started constructing queries as I normally would with Azure AD against the Microsoft Graph API.… keep reading
Changing SailPoint IdentityNow Identity Profiles Priorities using PowerShell
Update: Oct 2019. IdentityNow Profiles Priorities can be easily managed using the SailPoint IdentityNow PowerShell Module.
In SailPoint IdentityNow a single user is highly likely to be represented on multiple Sources, that in turn are likely to be authoritative for differing SailPoint IdentityNow Identity Profiles.… keep reading
SailPoint IdentityNow Identity Profiles Mapping Report
Update Jan 2020. This report can now be easily generated using the SailPoint IdentityNow PowerShell Module and the New-IdentityNowIdentityProfilesReport cmdlet
Last year I wrote this post here that detailed using the SailPoint IdentityNow API to generate an IdentityNow Sources HTML Report using PowerShell.… keep reading
Aggregating SailPoint IdentityNow Sources via API with PowerShell
Update: Oct 2019. Aggregating Sources can be easily managed using the SailPoint IdentityNow PowerShell Module.
Aggregating an IdentityNow Source can be achieved in a number of ways, but when you are in a development environment there will be times where you need to add additional attributes for a Source to load.… keep reading
Creating SailPoint IdentityNow Access Profiles via API and PowerShell
Update: Oct 2019. Access Profiles can be easily managed using the SailPoint IdentityNow PowerShell Module.
Managing SailPoint IdentityNow Access Profiles is easy enough to do using the SailPoint IdentityNow Portal. But what if you have the requirement to update, report on, or create numerous Access Profiles?… keep reading
Searching and Returning SailPoint IdentityNow Entitlements using the API and PowerShell
Update: Oct 2019. Entitlements can be easily searched using the SailPoint IdentityNow PowerShell Module.
Entitlements on IdentityNow Sources can be leveraged for many purposes within IdentityNow. Recently I’ve been looking to automate some Access Profiles that will in-turn have entitlements associated with them.… keep reading
SailPoint IdentityNow Governance Groups Management Agent for Microsoft Identity Manager
Last week I posted a SailPoint IdentityNow Roles Management Agent for Microsoft Identity Manager. Today I’m posting a sister for it, an IdentityNow Governance Groups Management Agent.
I’ve posted about Governance Groups before. See Managing SailPoint IdentityNow Governance Groups via the API with PowerShell.… keep reading
SailPoint IdentityNow Roles Management Agent for Microsoft Identity Manager
This is the first post in a series where I will provide a number of base-level Management Agents for Microsoft Identity Manager to integrate with SailPoint IdentityNow. Whilst the two products have areas of competing/equivalent functionality there are other aspects where integration of the two compliment each other.… keep reading
Managing SailPoint IdentityNow Tasks with PowerShell
Update: Oct 2019. IdentityNow Tasks can be easily managed using the SailPoint IdentityNow PowerShell Module.
In SailPoint IdentityNow when using the Request Center, tasks are created for activities that are not able to be automatically (directly) fulfilled. Essentially completion of the request requires someone to do something, then return to the IdentityNow Portal and flag the Task as complete.… keep reading