IIQCommon overview: ThingAccessUtils to lock down every thing
ThingAccessUtils implements the Common Security behavior behind most of Instrumental ID’s plugins, utilities, and other IIQ enhancements
IIQCommon overview: match anything with the Hybrid Object Matcher
This will be part of a blog series providing an overview of the many SailPoint IIQ utilities and tools available in Instrumental ID’s open-source iiq-common-public library. (For an overview of the entire library, see this earlier post.) This post will be about the “Hybrid Object Matcher” utility. This utility expands on the matching tools available…
IIQCommon overview: Eliminate boilerplate in plugin resources
This will be part of a blog series providing an overview of the many SailPoint IIQ utilities and tools available in Instrumental ID’s open-source iiq-common-public library. (For an overview of the entire library, see this earlier post.) This post will be about the BaseCommonPluginResource, the superclass to nearly all of Instrumental Identity’s web services. This…
Using Tomcat Rewrites to Customize the UI and Add Friendly URLs in IdentityIQ
Rewriting URLs The problem Let’s say you’ve written a custom SailPoint IdentityIQ (IIQ) plugin that exposes a plugin page. By default, plugins in IIQ have a technical-looking URL, like this: https://iiqdemo.example.com/identityiq/plugins/pluginPage.jsf?pn=PluginName. That’s both too much and too little information for an end user. If your page consumes Angular state, it might have an even uglier…
In Sync & Secure: Phase 1 Linting and Code Check for IdentityIQ
Continuing the discussion from In Sync & Secure: CI/CD Design Challenges and Considerations: Phase 1 of the DevOps solution standup process focuses on the many pre-deployment tests you can run to prevent issues from reaching your IdentityIQ environment and can leverage both SailPoint and custom tooling to meet your testing needs. Phase 1 also acts…
In Sync & Secure: CI/CD Design Challenges and Considerations
The minimum viable product of every DevOps solution is to reliably deploy an application in an automated fashion without any developer interaction (outside of optionally clicking a start button). Regardless of what pipeline platform you have available, your first consideration will be to follow a “push” or “pull” methodology for your pipeline. In the scenario…
In Sync & Secure: A DevOps Voyage with IdentityIQ and IdentityNow
With Navigate around the corner, we felt now would be an opportune time to share our journey and experiences in implementing robust DevOps processes within our clients’ diverse environments. The world of Information Security is constantly evolving, and as a result, so are the tools and methodologies used to manage and automate security processes. As…
Higher Education Implementation Suite
Identity Works LLC has been in the field for decades working across all verticals, but we often find ourselves working with colleges and universities. Over the years, we have solved many of the complex challenges with multi-personas and access policies that exist in higher education. We frequently hear “our setup is unique, we have this homegrown…
IDW SailPoint IIQ Query Plugin
Have you ever needed to query data directly from your IIQ database for reporting? Have you ever wanted to test a SailPoint filter or HQL query before you used it in a role membership rule? Have you ever wondered why your IIQ Filters behave the way they do? Have you ever needed a Filter String…
IDW Sailpoint IIQ History Plugin
The Instrumental Identity IIQ History Plugin painlessly enhances auditing and event tracking within existing IIQ systems, offering greater visibility to administrators, auditors, and business analysts. SailPoint IdentityIQ ships with a variety of historical and audit logging. Aggregation jobs can save a snapshot of an Identity containing all of its attributes and accounts so an admin…