Configuring AI-Driven Identity Security

Use the AI-Driven Identity Security Configuration page to connect IdentityIQ to AI-Driven Identity Security. From the gear icon, select Global Settings > AI Configuration. Note that the AI Configuration option does not appear in the Global Settings page until you have completed the steps in Integrating SailPoint AI-Driven Identity Security.

Note: Websphere and IBM JDK: Connections to AI-Driven Identity Security using the IBM JDK require a JVM argument to support TLS version 1.2. If you deploy IdentityIQ on WebSphere, or other application servers using the IBM JDK, you must specify the JVM argument -Dcom.ibm.jsse2.overrideDefaultTLS=true for your Java process. To do this in WebSphere, add the JVM argument to the Generic JVM arguments at: Servers > Java and Process Management > Process Definition > Java Virtual Machine > Generic JVM arguments.

For general information on getting started with AI-Driven Identity Security, see Getting Started with AI-Driven Identity Security for IdentityIQ.

AI-Driven Identity Security Hostname

The host name of the AI-Driven Identity Security access recommendation API.

For example, https://<org>.api.identitynow.com

Client ID

OAuth client ID for the AI-Driven Identity Security access recommendation API. See Generating Client Credentials in Your Identity Security Cloud Tenant for details on how to generate this credential.

Client Secret

OAuth client secret for the AI-Driven Identity Security access recommendation API. See Generating Client Credentials in Your Identity Security Cloud Tenant for details on how to generate this credential.

Read Timeout

The number of seconds IdentityIQ will wait to read access recommendations from AI-Driven Identity Security before reporting a failure.

Connect Timeout

The number of seconds IdentityIQ will wait to connect to AI-Driven Identity Security before reporting a failure.

Once your configuration details have been entered, you can click Test Connection to verify that the connection information is accurate and operating.

If you are using an HTTP or HTTPS proxy for IdentityIQ's communications, and you want to make an exception for connecting to AI-Driven Identity Security, you can configure your AI-Driven Identity Security connection to bypass the proxy connection by adding this key to the IdentityAIConfiguration object:

<entry key="ignoreProxyProperties" value="true" />

Save your settings before leaving the page.