IBM Security Verify

 View Only
  • 1.  IBM ISVG IM 10.0.2 Upload Customfiles via API issue

    Posted Thu May 16, 2024 11:32 AM

    Background:

    We are implementing IBM Security Verify Governance Identity Manager version 10.0.2. We want to upload HR Feed files (.csv) to Identity Manger about 10 to 100 files per day, so we use the provided API (API Documentation from Virtual Appliance in Custom File Management > directories > utilities > RAPI_DOCS.zip). The API that we are using is Upload Custom Files. We use Postman to test upload a .csv file and generate javaOKhttp, then develop .jar file from the generated code and use Window Task Scheduler to run a daily batch. Destination of files are directories > data > SampleFeedFiles

    Issue:

    Files take a long time to finish uploading. On the first try it takes 2 minutes per file and then after uploading more files, the taken time increases to 10 minutes per file. After that we try to upload files directly to Virtual Appliance by using Custom File Management > data > SampleFeedFiles then Select Upload and upload 1 files.

    We found that files that we upload from Virtaul Appliance takes about 10 minutes equal to upload by API.

    Are there any other methods to upload feed files? Because we see the menu Configure > Uplaod feed files on Virtaul Appliance but cannot found any API about this menu , or are there ways to improve performance?



    ------------------------------
    Nattawut Phongam
    ------------------------------


  • 2.  RE: IBM ISVG IM 10.0.2 Upload Customfiles via API issue

    Posted Tue May 21, 2024 03:08 AM

    The CSV upload is not meant to be a high volume and scalable HRFeed solution.

    My clear recommendation is to build an SDI based HRFeed solution instead - you can find samples and the extensions.zip downloadable from the LMI.

    HTH



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Engineer - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------



  • 3.  RE: IBM ISVG IM 10.0.2 Upload Customfiles via API issue

    Posted Tue May 28, 2024 06:13 AM

    Hi Franz Wolfhagen,

    Thank you for reply.

    For more infomation about our environment,

    In the old version before we migrate, we upload files directly to host path by using bash vulnerable and put file to host path like /mypath/myfile.csv and then our jar file read the csv file from that path.

    After migrate, we cannot use that vulnerable to access host path anymore so we use API upload like we mention before. We find out that the file we upload by API are in the path /opt/ibm/isim/data/SampleFeedFiles/myfile.csv and our jar file can read that csv path correctly.

    From your suggestion, we only see build an SDI based HRFeed solution about create and delete user.

    We cannot find about upload files to Virtual Appliance.

    Can you suggest us more specific place to look at? or we missed somthing in extension.zip?

    Best Regards,

    Nattawut



    ------------------------------
    Nattawut Phongam
    ------------------------------