PyISIM
Python client for IBM Security Identity Manager (ISIM / ITIM) web services (SOAP and REST APIs)
Tested on ISIM 7.0.1 FP13 and ISIM 7.0.2 FP2
Due to API limitations some functionalities are served through ISIM's REST API and some other through ISIM SOAP Web Services.
Docs
You can read the full documentation here
Examples
Look for the tests/ folder in our Github repo to see some more detailed examples.
- Login
from pyisim.auth import Session
user="itim manager"
password="secret"
cert="./my_certificate.cer"
url="iam.isim.com"
sess=Session(url,user,password,cert)Every example after assumes you have already a valid Session object named sess
- Creating people
from pyisim.entities import Person
info_persona={
"employeenumber": "1015463230",
"correo": "cazdlt@gmail.com",
"title": "Especialista de producto",
"departmentnumber":"IBM",
}
persona = Person(sess, person_attrs=info_persona)
persona.add(sess,"my org","my justification")- Modifying people
from pyisim import search
persona = search.people(sess,Person,"employeenumber","1015463230",limit=1)[0]
persona.title="CEO"
persona.modify(sess,"my justification")- Custom Person/BPPerson entities
from pyisim import Person
from pyisim import search
class MyBPPerson(Person):
profile_name="BPPerson"
def __init__(self,info,first_name=None):
if first_name is None:
first_name = "Andrés"
info["givenname"] = first_name
super().__init__(person_attrs=info)
MyBPPerson({"sn":"Zamora"}).add(sess,"my org","New BPPerson")- Access request
from pyisim import search
accesses=search.access(sess,search_filter="*Consulta*",limit=5)
person=search.people(session,by="givenname",search_filter="Juan",limit=1)[0]
response=person.request_access(session,accesses,"justification")
request_id=response.request.id # easily get request id- Approve activity
request_id="9585474949338"
actividad=search.activities(session,by="requestId",search_filter=request_id,limit=1)[0]
actividad.complete(sess,"approve","justification")- Fulfill RFI
request_id="123483274614"
form=[
{
"name":"description",
"value":[dn_rol],
},
...
]
actividad=search.activities(session,by="requestId",search_filter=request_id)[0]
actividad.complete(sess,form,"justification")- Update property files (ISIM VA)
from pyisim.va.auth import VASession
from pyisim.va.configure import update_property
u="admin@local"
p="secret"
url="iam.isimva.com"
cert="./mycert.cer"
s=VASession(u,p,url,cert)
property_file="CustomLabels.properties"
property_name="scriptframework.properties"
property_value="ITIM.java.access.util"
update_property.create_or_update_property(s,property_file,property_name,property_value)Functionalities
| Entities\Operations | Search | DN Lookup | Add | Delete | Suspend | Restore | Modify |
|---|---|---|---|---|---|---|---|
| People | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Dynamic Roles | ✓ | ✓ | ✓ | ✓ | ✓ | ||
| Static Roles | ✓ | ✓ | ✓ | ✓ | ✓ | ||
| Provisioning Policies | ✓ | ✓ | ✓ | ✓ | |||
| Activities | ✓ | (Complete) | |||||
| Organizational Containers | ✓ | ✓ | |||||
| Services | ✓ | ||||||
| Access | ✓ | (Request) | |||||
| Groups | ✓ | ||||||
| Accounts | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ (and orphan) |
- ISIM VA Utilities:
- Authentication
- Create/Search/Update property files
TODO
in priority order
- Add operations to services
- DN Lookup
- Add
- Modify
- Delete
- Test connection
- Add some complex use cases to the documentation
- Consider using dictionaries as search filters
