• State Not Answered
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 348 views
  • Users 0 members are here
Options
Related

API Call From SPP to IGA tool

david williams
2 months ago

Hi,

We use our IGA system for account and entitlement provisioning, so I'm wondering how SPP can call the IGA API.

Use Case: 

1. user raises request for windows server access for specific AD account

2. When the request is approved or when the session starts, I want SPP to make a call to the IGA API, for the IGA to provision the account into an AD group which allows access to the server

3. Wen the session completes, then another call to de-provision the group entitlement from the account.

Is this possible and how in SPP could I configure the call to be made

Thanks

Parents
  • 0 2 months ago

    Hi,

    There is a new feature (JIT Account Privilege Elevate and Demote for Supported Platforms) that will be included in SPP's next feature release 7.5 subject to Product management approval.

    This new feature will include support for this type of workflow which can be configured on the SPP side without needing for SPP to make any extra calls back to IGA.

    Thanks!

  • 0 2 months ago in reply to Tawfiq.Ahmad

    Hello Tawfiq,

    That you certainly be an enormous capability to add. Without this level of JIT capability, it forces the practice of standing privilege's, which is what we are all trying to get away from.

    Many thanks for your time in responding.

    Dave

Reply Children
No Data