Supported Features

The Web Services Connector supports the following features:

Account Management

• Aggregation, Refresh Accounts, Pass Through Authentication (Basic Authentication)

  The Web Service Connector provides support for using the Web Service application as a Pass Through Authentication application. For more information on configuration for pass-through authentication, refer to Pass Through Authentication.

  Note
  Pass Through Authentication only supports identity attributes.

• Create, Update, Delete accounts

• Enable, Disable, Change Password

• Add /Remove Entitlements

• Add Entitlements when Enabling Accounts via Provisioning

• Remove Entitlements when Disabling Accounts via Provisioning

• Account Delta Aggregation

Account - Group Management

• Aggregation, Refresh Groups

Additional Supported Features

The SailPoint Web Services Connector supports the following:

• Application layer proxy.

• Saving updated Refresh Tokens received along with access tokens.

  If the Refresh Token has expired, it must be manually generated and updated in the application configuration as mentioned in (General Settings) Basic Configuration Parameters.

• Additional support for client certificate authentication.

  For more information, refer to the Enable Client Certificate Authentication parameter in (General Settings) Basic Configuration Parameters.

• Account, group, and role aggregation from multiple independent endpoints.

  For more information, refer to Multiple Independent Endpoints.

• Cookies for multiple endpoints configuration. The application will manage the cookies internally only for the multiple endpoints configured for the same operation. Cookies from the previous endpoints can be used in all the subsequent endpoints of same operation type.

• Pagination

  For more information on embedding pagination support in Web Service Connector, refer toAggregation Paging.

• Partitioned account aggregation and configuration for single-threaded aggregation and partitioned aggregation simultaneously.

  For more information, refer to Partitioning.

• Group object provisioning only when Web Services is used as a generic source. For more information refer to Group Object Provisioning.

• Multiple Group object types

  The following table lists the example for different operations for the added new Group Object Types:

  Object Types	Operation Type	Description
  Group	Group Aggregation Get Object - Group Add Entitlement Remove Entitlement	Aggregates all Group objects.
  Role	Group Aggregation - Role Get Object - Role Add Entitlement - Role Remove Entitlement - Role	Aggregates all Group Role objects.
  PermissionSet	Group Aggregation - PermissionSet Get Object - PermissionSet Add Entitlement - PermissionSet Remove Entitlement - PermissionSet	Aggregates all Group PermissionSet objects.