Building a Microsoft Identity Manager PowerShell Management Agent for Workday HR

25th of September, 2018 / Darren Robinson / No Comments

Update 29 August 2019 See this post for multi-threading Granfeldt PowerShell Management Agent Imports (with Workday as an example).

Before I even get started with this post, let me state that the integration I describe here is not a standalone solution. Integrating with Workday for any organisation of significant size will require multiple integration points each providing coverage for the scenarios for your implementation. I list a few in this post, but Alexander Filipin has already done an awesome job here.… [Keep reading] “Building a Microsoft Identity Manager PowerShell Management Agent for Workday HR”

Automate the Generation of a Granfeldt PowerShell Management Agent Schema Definition File

24th of September, 2018 / Darren Robinson / No Comments

Generating Schema.ps1 for the Granfeldt FIM/MIM PowerShell Management Agent

Getting started writing your first Forefront/Microsoft Identity Manager Granfeldt PowerShell Management Agent can be a bit daunting. Before you can do pretty much anything you need to define the schema for the PSMA. Likewise if you have written many, the generation of the schema file often seems to take longer than it should and can be a little tedious when all you want to do is write the logic for the Import and Export scripts.… [Keep reading] “Automate the Generation of a Granfeldt PowerShell Management Agent Schema Definition File”

Integrating with SailPoint IdentityNow Private (v1) API’s using PowerShell

19th of September, 2018 / Darren Robinson / 1 Comment

Update: Oct 2019. Leveraging the SailPoint IdentityNow API's is now easier using the SailPoint IdentityNow PowerShell Module.

How to generate the ‘Password Hash’ to leverage the IdentityNow Private API’s

Recently I’ve posted about integrating with the SailPoint IdentityNow API’s. Specifically;

So why another post on a very similar subject?… [Keep reading] “Integrating with SailPoint IdentityNow Private (v1) API’s using PowerShell”

Lifecycle Management of Identities in SailPoint IdentityNow via API and PowerShell

14th of September, 2018 / Darren Robinson / No Comments

Update: Oct 2019. Lifecycle Management of Identities can be easily performed using the SailPoint IdentityNow PowerShell Module.

Introduction

If you’ve been following along I’ve been posting about leveraging the SailPoint IdentityNow API for;

Now that I’ve covered Searching and Authoring all that is left is lifecycle management. And that’s what I’ll cover in this post.… [Keep reading] “Lifecycle Management of Identities in SailPoint IdentityNow via API and PowerShell”

Authoring Identities in SailPoint IdentityNow via the API and PowerShell

13th of September, 2018 / Darren Robinson / No Comments

Update: Oct 2019. Authoring Identities can be easily performed using the SailPoint IdentityNow PowerShell Module.

Introduction

A key aspect of any Identity Management project is having an Authoritative Source for Identity. Typically this is a Human Resources system. But what about identity types that aren’t in the authoritative source? External Vendors, contingent contractors and identities that are used by End User Computing systems such as Privileged Accounts, Service Accounts, Training Accounts.

Now some Identity Management Solutions allow you to Author identity through their Portals, and provide a nice GUI to create a user/training/service account.… [Keep reading] “Authoring Identities in SailPoint IdentityNow via the API and PowerShell”

Reporting on SailPoint IdentityNow Identities using the ‘Search’ (Beta) API and PowerShell

10th of September, 2018 / Darren Robinson / No Comments

Introduction

SailPoint recently made available in BETA their new Search functionality. There’s some great documentation around using the Search functions through the IdentityNow Portal on Compass^. Specifically;

^ Compass Access Required

Each of those articles are great, but they are centered around performing the search via the Portal. For some of my needs, I need to do it via the API and that’s what I’ll cover in this post.… [Keep reading] “Reporting on SailPoint IdentityNow Identities using the ‘Search’ (Beta) API and PowerShell”

Reporting on SailPoint IdentityNow Identities using the ‘Search’ (Beta) API and PowerShell

10th of September, 2018 / Darren Robinson / No Comments

Update: Oct 2019. Searching Identities can be easily performed using the SailPoint IdentityNow PowerShell Module.

Introduction

^ Compass Access Required
Each of those articles are great, but they are centered around performing the search via the Portal. … [Keep reading] “Reporting on SailPoint IdentityNow Identities using the ‘Search’ (Beta) API and PowerShell”

Using Azure Cognitive Services Language Text Translation with PowerShell

28th of August, 2018 / Darren Robinson / No Comments

Introduction

Over the last few months whilst developing my Voice Assistant for Microsoft Identity Manager I’ve been leveraging a number of the Azure Cognitive Services. Each one has its own nuance as they all appear to be in differing iterations of maturity. My first hurdle when looking to leverage one, is the examples provided. Often the samples are in languages I’m not fluent in and pretty much always there is no examples of using PowerShell and the awesome Invoke-RestMethod call to interact with them.… [Keep reading] “Using Azure Cognitive Services Language Text Translation with PowerShell”

Automating Azure AD B2B Guest Invitations using Microsoft Identity Manager

27th of August, 2018 / Darren Robinson / No Comments

Update: Oct 30 '18 
Also see this post that adds support for Microsoft's updates 
to the Microsoft Graph to include additional information 
about Azure AD B2B Guest users.

Introduction

Earlier this year Microsoft released the Microsoft Identity Manager Azure AD B2B Management Agent. I wrote about using it to write to Azure AD in this post here. As detailed in that post my goal was to write to Azure AD using the MA. I provided an incomplete example of doing that for Guests.… [Keep reading] “Automating Azure AD B2B Guest Invitations using Microsoft Identity Manager”

Quickly generating a dataset of fictitious Users using Randomised Real Data and PowerShell

7th of August, 2018 / Darren Robinson / No Comments

Introduction

I’ve lost count of the number of times I’ve had the need to generate a representative dataset of users. Of course I have access to many production datasets but for many reasons they can’t be used. Finding previous datasets I’ve randomly generated always seems to take longer than it should, so with my most recent iteration of having to generate a fictitious list of users with Australian addresses, I’ve documented how I went about it, along with the source data I used and the script to create it.… [Keep reading] “Quickly generating a dataset of fictitious Users using Randomised Real Data and PowerShell”