PyISIM
Python client for IBM Security Identity Manager (ISIM / ITIM) web services (SOAP and REST APIs)
Tested on ISIM 7.0.1 FP13 and ISIM 7.0.2 FP2
Due to API limitations some functionalities are served through ISIM's REST API and some other through ISIM SOAP Web Services.
Docs
You can read the full documentation here
Examples
Look for the tests/
folder in our Github repo to see some more detailed examples.
from pyisim.auth import Session
user="itim manager"
password="secret"
cert="./my_certificate.cer"
url="iam.isim.com"
sess=Session(url,user,password,cert)
Every example after assumes you have already a valid Session object named sess
from pyisim.entities import Person
info_persona={
"employeenumber": "1015463230",
"correo": "cazdlt@gmail.com",
"title": "Especialista de producto",
"departmentnumber":"IBM",
}
persona = Person(sess, person_attrs=info_persona)
persona.add(sess,"my org","my justification")
from pyisim import search
persona = search.people(sess,Person,"employeenumber","1015463230",limit=1)[0]
persona.title="CEO"
persona.modify(sess,"my justification")
- Custom Person/BPPerson entities
from pyisim import Person
from pyisim import search
class MyBPPerson(Person):
profile_name="BPPerson"
def __init__(self,info,first_name=None):
if first_name is None:
first_name = "AndrΓ©s"
info["givenname"] = first_name
super().__init__(person_attrs=info)
MyBPPerson({"sn":"Zamora"}).add(sess,"my org","New BPPerson")
from pyisim import search
accesses=search.access(sess,search_filter="*Consulta*",limit=5)
person=search.people(session,by="givenname",search_filter="Juan",limit=1)[0]
response=person.request_access(session,accesses,"justification")
request_id=response.request.id
request_id="9585474949338"
actividad=search.activities(session,by="requestId",search_filter=request_id,limit=1)[0]
actividad.complete(sess,"approve","justification")
request_id="123483274614"
form=[
{
"name":"description",
"value":[dn_rol],
},
...
]
actividad=search.activities(session,by="requestId",search_filter=request_id)[0]
actividad.complete(sess,form,"justification")
- Update property files (ISIM VA)
from pyisim.va.auth import VASession
from pyisim.va.configure import update_property
u="admin@local"
p="secret"
url="iam.isimva.com"
cert="./mycert.cer"
s=VASession(u,p,url,cert)
property_file="CustomLabels.properties"
property_name="scriptframework.properties"
property_value="ITIM.java.access.util"
update_property.create_or_update_property(s,property_file,property_name,property_value)
Functionalities
Entities\Operations | Search | DN Lookup | Add | Delete | Suspend | Restore | Modify |
---|
People | β | β | β | β | β | β | β |
Dynamic Roles | β | β | β | β | | | β |
Static Roles | β | β | β | β | | | β |
Provisioning Policies | β | | β | β | | | β |
Activities | β | | | | | | (Complete) |
Organizational Containers | β | β | | | | | |
Services | β | | | | | | |
Access | β | | | | | | (Request) |
Groups | β | | | | | | |
Accounts | β | | β | β | β | β | β (and orphan) |
- ISIM VA Utilities:
- Authentication
- Create/Search/Update property files
TODO
in priority order
- Add operations to services
- DN Lookup
- Add
- Modify
- Delete
- Test connection
- Add some complex use cases to the documentation
- Consider using dictionaries as search filters