HTTP Operations

In HTTP Operations, you can add, edit, delete, and reorder HTTP operations.

The following operations are supported:

  • Test Connection

  • Account Aggregation

  • Machine Identity Aggregation - {name}

    The connector can discover and aggregate agents in systems that use REST, SOAP, and GraphQL-based APIs. You can configure each endpoint to aggregate agents and their associated properties as specified in the Machine Identity schema.

    For example, if the AI Agent name is serviceNow:agent, the complete HTTP endpoint is: Machine Identity Aggregation - serviceNow:agent

    Important
    To support Machine Identity aggregation, you must configure the Machine Identity schema manually. Contact SailPoint support for assistance.

  • Account Delta Aggregation

  • Group Aggregation

  • Get Object

  • Get Object-Group

  • Create Account

  • Update Account

  • Delete Account

  • Enable Account

  • Disable Account

  • Unlock Account

  • Change Password

  • Add Entitlement

  • Remove Entitlement

  • Custom Authentication

  • Pass-Through Authentication

Note

  • For Entitlement Aggregation, you need to configure the schema manually using the REST APIs. Contact SailPoint Support for assistance.

  • For the Web Services source, you can configure the native identity in the provisioning plan using a placeholder such as $plan.planNativeIdentity$.

  • Access to ExternalDTD is disabled during XML parsing.

Support for Cookies

The Web Services source supports cookies for HTTP requests.

The Web Services source supports cookies for multiple endpoints configuration. The source manages the cookies internally for the endpoints configured for the same operation. Cookies from the previous endpoints can be used in all the subsequent endpoints of the same operation type.

The Web Services source supports the JSON array as a top element in the HTTP requests.

By default, the Web Services SaaS source supports cookies. Cookies can be disabled by adding the disableCookies attribute key with true as a value. This is not applicable for the authentication API call operation.