Provisioning
The Imprivata VPAM SaaS connector supports provisioning, allowing you to create and manage accounts and entitlements in Imprivata VPAM directly from SailPoint.
Prerequisite: Your system is configured for provisioning.
When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.
For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.
Important
This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.
Provisioning Attributes
The following list outlines which account attributes SailPoint uses to create a profile for new Imprivata VPAM SaaS accounts:
Important
Account attributes marked with an asterisk(*) are mandatory attributes for account creation.
For Users
| Account Attribute | Type | Generator | Description |
|---|---|---|---|
| userType* | String | Static Value - User | The type of the User. |
| userId* | String | Identity Attribute - Username | The User ID for login. |
| name* | String | Identity Attribute - Display Name | The full name of the User. |
| email* | String | Identity Attribute - Work Email | The email of the User. |
| sendRegistrationEmail | String | Disabled | If true, sends a registration email to the newly-created User. Defaults to false. |
| department | String | Disabled | The name of the department associated with the User. |
| departmentId | Integer | Disabled | The ID of the Department that the User belongs to. |
| phone | Boolean | Static | The phone number of the User. |
| altPhone | String | Disabled | The alternative phone number of the User. |
| remoteAddress | String | Disabled | Network restrictions for the Client. |
| localAddress | String | Disabled | Network restrictions for the Client. |
| authProvider | String | Disabled | Authentication provider to use for the User. |
| status | Integer | Disabled | The status of the user, where 0 : active 1 : disabled 2 : unregistered 3 : deleted |
For Vendor Representatives (Vendor Reps)
Note
The vendorId is a unique identifier assigned to each Vendor in the Imprivata VPAM system. You will need this Vendor ID when creating a new Vendor Rep associated with that specific Vendor. For more information, refer to Steps to find Vendor ID from the managed Imprivata VPAM system.
| Account Attribute | Type | Generator | Description |
|---|---|---|---|
| userType* | String | Static Value - vendorRep | The type of the Vendor Rep. |
| vendorId* | Integer | Disabled | The ID of the Vendor associated with the Vendor Representatives. |
| name* | String | Identity Attribute - Display Name | The full name of the Vendor Representatives. |
| email* | String | Identity Attribute - Work Email | The email of the Vendor Representatives. |
| phone | Boolean | Static | The phone number of the Vendor Representatives. |
| altPhone | String | Disabled | The alternative phone number of the Vendor Representatives. |
| disabled | String | Identity Attribute - Username | If true, this Vendor Representatives has been disabled. |
| department | String | Disabled | The name of the department associated with the Vendor Representatives. |
| notes | String | Disabled | The notes for the Vendor Representatives. |
| authProvider | String | Disabled | Authentication provider to use for the Vendor Rep. |
| approvalAccessChange.accessOption | String | Disabled | If present, determines how the access will be set for this Vendor Representatives. Possible values are "ENABLE", "ENABLE_FOR", "ENABLE_UNTIL". ENABLE needs the ENABLE_INDEFINITE_ACCESS permission. |
| approvalAccessChange.accessPeriod | String | Disabled | Used when accessOption is present and set to "ENABLE_FOR". Determines the access period used to calculate when access expires for a Vendor Representatives. Possible values are "HOURS", "DAYS", "WEEKS". |
| approvalAccessChange.accessTimeFloat | Integer | Disabled | Used when accessOption is present and set to "ENABLE_FOR". Determines for how many weeks, days or hours access will be allowed for this Vendor Rep. |
| approvalAccessChange.dateAccessExpires | String | Disabled | Used when accessOption is present and set to "ENABLE_UNTIL". Determines the date the access expires for this Vendor Representatives. |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.