IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IGI Web Service Connector

    Posted Tue October 20, 2020 10:27 AM
    Hi,

    Some other IDM products, actually all that I've used before, have a connector type called Web Service Connector. In IGI, is there a corresponding connector (I couldn't find one)? If not, do we have to implement  one using IGI Rest APIs inside it?

    ------------------------------
    GURER
    ------------------------------


  • 2.  RE: IGI Web Service Connector

    Posted Tue October 20, 2020 01:53 PM
    I am not sure what you mean by "Web Service Connector" in this context - is that functionality to connect to an external Web Service from within IGI e.g. during a workflow - or do you mean an adapter that can manage a system through Web Services calls ?

    Can you shed more light over the usecase you are trying to solve ?


    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------



  • 3.  RE: IGI Web Service Connector

    Posted Tue October 20, 2020 02:17 PM
    Hi Franz,

    The second one: an adapter that can manage a system through Web Services calls, There is a custom application I want to integrate with IGI, through rest web services. They provide methods like createUser, disableUser, deleteUser, updateUser, assignRoleToUser, deassignRoleFromUser, updatePassword etc. Using these methods I want to integrate it with IGI. To do that should I develop a custom connector and use these methods in this connector by calling these methods? What's the best practice to do it in IGI?

    Thanks.


    ------------------------------
    GURER ONDER
    ------------------------------



  • 4.  RE: IGI Web Service Connector

    Posted Wed October 21, 2020 02:10 AM
    I was wondering how this could fit into a standard connector - there are no (official) standards except SCIM that comes with its own problems for the purpose of managing account in a system.
    In IGI this kind of connector is called an "adapter" and can be developed in numerous way - but the default recommended way is to develop a custom adapter using the supplied Security Directory Integrator (SDI).  You can download the "IBM Security Identity Adapter Development and Customization Guide" from Passport advantage - the current list of adapters are available here : https://www.ibm.com/support/pages/ibm-security-identity-adapters-v7x.
    Building the custom adapter is "no walk in the park" the first time - SDI is very good toolkit - but there is as with most tools a learning curve that needs to be climbed. But when that is done you can develop an adapter in a reasonable time frame.
    The basis for WebServices in SDI is the "HTTP Connector" - using this in call reply mode is the default way to call REST/SOAP services. But SDI also allows you to wrap all this in a custom connector for you specific purposes which is very useful if you have to integrate to a more complex web service.
    SDI has its own very dedicated developer community (search the web for "ibm drectory integrator") which I am a proud member of - take you time to learn SDI - it is one of the best integration tools out there.
    Alternatively you can choose to engage with IBM Services or one of our business partners to help you out - developing custom adapters is a very common exercise in this business...

    HTH

    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------



  • 5.  RE: IGI Web Service Connector

    Posted Wed October 28, 2020 02:18 PM
    Hi Gurer,

    There is a connector called IBM Security Identity Adapter for Command Line 
    This adapter allows to create any kind of CLI based adapters by yourself. I used this to create Powershell based CLI scripts to connect a thick app to identity app. I also use this app for a web service calls  


    ------------------------------
    erkan sertoglu
    ------------------------------