identitynow.sgnl.yaml

# Sailpoint IdentityNow Configuration YAML for DS2.0
displayName: "Sailpoint IdentityNow"
icon: "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"
description: "Sailpoint IdentityNow as a System of Record"
# Address does not always need to end with identitynow.com suffix. For example, identitynow-demo.com.
address: "{{Input Required: IdentityNow-Tenant}}.api.identitynow.com"
defaultSyncFrequency: HOURLY
defaultSyncMinInterval: 1
defaultApiCallFrequency: SECONDLY
defaultApiCallMinInterval: 1
type: "IdentityNow-1.0.0"
# Example Config:
# {
#   "apiVersion": "v3",
#   "entityConfig": {
#     "accounts": {
#       "uniqueIDAttribute": "id"
#     },
#     "entitlements": {
#       "uniqueIDAttribute": "id",
#       "apiVersion": "beta" // overrides the top level apiVersion.
#     },
#     "accountEntitlements": {
#       "uniqueIDAttribute": "id",
#       "apiVersion": "beta"
#     },
#     "identities": {
#       "uniqueIDAttribute": "id",
#       "apiVersion": "beta"
#     }
#   }
# }
adapterConfig: "ewogICJhcGlWZXJzaW9uIjogInYzIiwKICAiZW50aXR5Q29uZmlnIjogewogICAgImFjY291bnRzIjogewogICAgICAidW5pcXVlSURBdHRyaWJ1dGUiOiAiaWQiCiAgICB9LAogICAgImVudGl0bGVtZW50cyI6IHsKICAgICAgInVuaXF1ZUlEQXR0cmlidXRlIjogImlkIiwKICAgICAgImFwaVZlcnNpb24iOiAiYmV0YSIKICAgIH0sCiAgICAiYWNjb3VudEVudGl0bGVtZW50cyI6IHsKICAgICAgInVuaXF1ZUlEQXR0cmlidXRlIjogImlkIiwKICAgICAgImFwaVZlcnNpb24iOiAiYmV0YSIKICAgIH0sCiAgICAiaWRlbnRpdGllcyI6IHsKICAgICAgInVuaXF1ZUlEQXR0cmlidXRlIjogImlkIiwKICAgICAgImFwaVZlcnNpb24iOiAiYmV0YSIKICAgIH0KICB9Cn0K"
# All auth mechanisms specified below must be supported by the specified Adapter.
auth:
  - oAuth2ClientCredentials:
      clientId: "{{Input Required: Client-ID}}"
      tokenUrl: "https://{{Input Required: IdentityNow-Domain}}/oauth/token"
      authStyle: AutoDetect
      clientSecret: "{{Input Required: Client-Secret}}"
entities:
  Account:
    displayName: Account
    externalId: accounts
    description: Account entity in IdentityNow
    pageSize: 250
    pagesOrderedById: false
    attributes:
      - name: id
        externalId: id
        type: String
        indexed: true
        uniqueId: true
      - name: name
        externalId: name
        type: String
      - name: sourceId
        externalId: sourceId
        type: String
      - name: sourceName
        externalId: sourceName
        type: String
      - name: identityId
        externalId: identityId
        type: String
        indexed: true
      - name: authoritative
        externalId: authoritative
        type: Bool
      - name: description
        externalId: description
        type: String
      - name: disabled
        externalId: disabled
        type: Bool
      - name: locked
        externalId: locked
        type: Bool
      - name: nativeIdentity
        externalId: nativeIdentity
        type: String
      - name: systemAccount
        externalId: systemAccount
        type: Bool
      - name: uncorrelated
        externalId: uncorrelated
        type: Bool
      - name: uuid
        externalId: uuid
        type: String
      - name: manuallyCorrelated
        externalId: manuallyCorrelated
        type: Bool
      - name: hasEntitlements
        externalId: hasEntitlements
        type: Bool
  Entitlement:
    displayName: Entitlement
    externalId: entitlements
    description: Entitlement entity in IdentityNow
    pageSize: 250
    pagesOrderedById: false
    attributes:
      - name: id
        externalId: id
        type: String
        indexed: true
        uniqueId: true
      - name: name
        externalId: name
        type: String
      - name: created
        externalId: created
        type: DateTime
      - name: modified
        externalId: modified
        type: DateTime
      - name: attribute
        externalId: attribute
        type: String
      - name: value
        externalId: value
        type: String
      - name: sourceSchemaObjectType
        externalId: sourceSchemaObjectType
        type: String
      - name: privileged
        externalId: privileged
        type: Bool
      - name: cloudGoverned
        externalId: cloudGoverned
        type: Bool
      - name: description
        externalId: description
        type: String
      - name: requestable
        externalId: requestable
        type: Bool
      - name: segments
        externalId: segments
        type: String
        list: true
  AccountEntitlement:
    displayName: AccountEntitlement
    # This externalId does not need to match the IDN's API unlike the rest of the entities. AccountEntitlement is an entity solely used
    # to create the relationship between Entitlement and Account.
    externalId: accountEntitlements
    description: AccountEntitlement entity in IdentityNow
    pageSize: 250
    pagesOrderedById: false
    attributes:
      - name: id
        externalId: id
        type: String
        indexed: true
        uniqueId: true
      - name: accountId
        externalId: accountId
        type: String
        indexed: true
      - name: entitlementId
        externalId: entitlementId
        type: String
        indexed: true
  Identity:
    displayName: Identity
    externalId: identities
    description: Identity entity in IdentityNow
    pageSize: 250
    pagesOrderedById: false
    attributes:
      - name: id
        externalId: id
        type: String
        indexed: true
        uniqueId: true
      - name: name
        externalId: name
        type: String
      - name: created
        externalId: created
        type: DateTime
      - name: modified
        externalId: modified
        type: DateTime
      - name: alias
        externalId: alias
        type: String
      - name: emailAddress
        externalId: emailAddress
        type: String
      - name: processingState
        externalId: processingState
        type: String
      - name: identityStatus
        externalId: identityStatus
        type: String
      - name: isManager
        externalId: isManager
        type: Bool
      - name: lastRefresh
        externalId: lastRefresh
        type: DateTime

relationships:
  # (Entitlement) -[EntitlementMember]-> (AccountEntitlement)
  EntitlementMember:
    name: EntitlementMember
    displayName: Entitlement Member
    fromAttribute: entitlements.id
    toAttribute: accountEntitlements.entitlementId
  # (AccountEntitlement) -[AccountMember]-> (Account)
  AccountMember:
    name: AccountMember
    displayName: Account Member
    fromAttribute: accountEntitlements.accountId
    toAttribute: accounts.id
  # Path relationship based on the previous two join relationships.
  # (Entitlement) -[Member]-> (Account)
  Member:
    name: Member
    displayName: Member
    path:
      - relationship: EntitlementMember
        direction: Forward
      - relationship: AccountMember
        direction: Forward
  # (Account) -[AccountIdentity]-> (Identity)
  AccountIdentity:
    name: AccountIdentity
    displayName: Account Identity
    fromAttribute: accounts.identityId
    toAttribute: identities.id