Trigger Attestation for selected objects using SOAP service call?

Question

Hi Guys, Has anyone tried triggering attestation policy for selected objects using One Identity SOAP/REST service call? I'm working on an automated testing solution where we could test the attestation functionality by triggering attestation policy for selected objected through our automated processes calling D1IM SOAP service and then validate the results. Any suggestions?

qazi.n.akhter · Answer

Hi Ruchita, 
 You can create something like following: 
 Public Function CCC_AttestationPolicy_CreateForSingleObject( ByVal uidAttestationPolicy As String , ByVal objectkey As String ) As String 
 Try 
 Dim policy As ISingleDbObject = Connection.CreateSingle( "AttestationPolicy" , uidAttestationPolicy) 
 Dim objectKeyAttestationCase As String = policy.Custom.CallMethod( "CreateAttestation" , objectkey).ToString 
 Return objectKeyAttestationCase 
 Catch ex As Exception 
 Return String .Empty 
 End Try 
 End Function 
 
 Here uidAttestationPolicy is the policy you want to trigger and objectkey is pointing to the record you want policy to be triggered against. 
 
 Hope it helps.

George Cerbone · Answer

Hi Ruchita, 
 It is an array of strings. As Markus indicated, it's not possible to test this from Object browser. You need to do to it in code. Something like: 
 Dim myArray() As String = { "ObjectKey1" , " ObjectKey2 " , " ObjectKey3 " } 
 CreateAttestation (myArray)

Markus Weiss-Ehlers · Answer

I would create a script that creates the attestation cases for your attestation policy. The script can use a method available at enabled AttestationPolicy objects that allow you to specify the object keys you want to attest. 
 You can check the available methods in the object properties windows, tab called Methods. The method for your case would be CreateAttestations(String[] objectKeys ) which takes an string array of object keys you want to attest using the current attestation policy. It returns an array of DBObjectKey objects. 
 
 So you just need to call the script using the SOAP / REST API. 
 HtH

Endpoint Privilege Management

Trigger Attestation for selected objects using SOAP service call?

Top Replies