Package org.openiam.srvc.idm

Class DefaultProvisioningService

java.lang.Object

org.openiam.srvc.AbstractApiService

org.openiam.srvc.idm.DefaultProvisioningService

All Implemented Interfaces:

ProvisionService

@Component("defaultProvision")
public class DefaultProvisioningService
extends AbstractApiService
implements ProvisionService

DefaultProvisioningService is responsible for receiving and processing requests that are to be sent to the target system connectors.

Author:

suneet

Field Summary

Fields inherited from class org.openiam.srvc.AbstractApiService

applicationContext, log, rabbitMQSender

Constructor Summary

Constructors

Constructor	Description
DefaultProvisioningService(ProvisionQueue queue)

Method Summary

Modifier and Type	Method	Description
Response	addEvent(ProvisionActionEvent event, ProvisionActionTypeEnum type)
ManagedSystemViewerResponse	buildManagedSystemViewer(String userId, String managedSysId)
Response	deleteUser(DeleteUserProvisioningRequest request)	Deletes a user from OpenIAM and appropriate target systems
Response	deProvisionUsersToResource(List<String> userIds, List<String> resourceIds)
Response	disableUser(DisableUserProvisioningRequest request)	Operation to disable user account based on request data
Response	enableUser(EnableUserProvisioningRequest request)	Operation to enable user account based on request data
List<String>	getAttributeNamesFromConnector(String managedSysId, boolean attributes)
Response	lockUser(LockUserProvisionRequest request)	Operation locks account
Response	provisionUsersToResource(List<String> userIds, List<String> resourceIds)
Response	requestAdd(ExtensibleUser extUser, Login login)	Adds user directly to a given target system bypassing policy map attributes script logic
Response	requestModify(ExtensibleUser extUser, Login login)	Modifies user directly in a given target system bypassing policy map attributes script logic
UserPasswordResponse	resetPassword(PasswordSync passwordSync)	Reset password in target systems
Response	retryConnectorRequest(String replyId)
Response	retryProvisionRequest(String provisionRequestId)	method used to re-send failed provision request to connector again, important, it does't generate new diff object, it just re-sends what was sent but failed
Response	saveUser(ProvisionUser user)	The saveUser operation enables a requester to create or update a new user on the target systems.
LookupUserResponse	searchUser(SearchObjectsProvisioningRequest request)	Operation unlocks an account
PasswordValidationResponse	setPassword(PasswordSync passwordSync)	The setPassword operation enables a requestor to specify a new password for an user across target systems
Response	startBulkOperation(BulkOperationRequest bulkRequest, boolean async)
Response	syncPasswordFromSrc(PasswordSync passwordSync)	Method is used by target systems to inform OpenIAM that password was changed.
Response	testConnectionConfig(String managedSysId)	Operation validates the connection information that was supplied for this managed system
Response	unlockUser(UnlockUserProvisionRequest request)	Operation unlocks an account

Methods inherited from class org.openiam.srvc.AbstractApiService

broadcast, crudRequest, getBooleanValue, getIntValue, getIntValue, getRabbitMqQueue, getResponse, getResponse, getValue, getValue, getValueList, getValueList, idRequest, manageApiRequest, manageApiRequest, manageCrudApiRequest, manageCrudApiRequest, manageCrudApiRequest, manageCrudApiRequest, membershipRequestProcessing, membershipRequestProcessing, publish, publish, sendAsync, sendAsync

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultProvisioningService

@Autowired
public DefaultProvisioningService(ProvisionQueue queue)

Method Detail

saveUser

public Response saveUser(ProvisionUser user)

Description copied from interface: ProvisionService

The saveUser operation enables a requester to create or update a new user on the target systems. Also this operation can do modify if this user has existed in one of the target systems.

Specified by:

saveUser in interface ProvisionService

Parameters:

user - - new provisioning user

Returns:

ProvisionUserResponse

deleteUser

public Response deleteUser(DeleteUserProvisioningRequest request)

Description copied from interface: ProvisionService

Deletes a user from OpenIAM and appropriate target systems

Specified by:

deleteUser in interface ProvisionService

Returns:

unlockUser

public Response unlockUser(UnlockUserProvisionRequest request)

Description copied from interface: ProvisionService

Operation unlocks an account

Specified by:

unlockUser in interface ProvisionService

Returns:

lockUser

public Response lockUser(LockUserProvisionRequest request)

Description copied from interface: ProvisionService

Operation locks account

Specified by:

lockUser in interface ProvisionService

Returns:

setPassword

public PasswordValidationResponse setPassword(PasswordSync passwordSync)

Description copied from interface: ProvisionService

The setPassword operation enables a requestor to specify a new password for an user across target systems

Specified by:

setPassword in interface ProvisionService

Returns:

syncPasswordFromSrc

public Response syncPasswordFromSrc(PasswordSync passwordSync)

Description copied from interface: ProvisionService

Method is used by target systems to inform OpenIAM that password was changed. OpenIAM will update password value for all identities that user has and perform provisioning to all target systems except target system that pointed in PasswordSync.managedSystemId zaporozhets

Specified by:

syncPasswordFromSrc in interface ProvisionService

Parameters:

passwordSync - - synchronization password requests

Returns:

Response with Response.status = ResponseStatus.SUCCESS in case that operation performed correctly,method return Response.status = ResponseStatus.FAILURE in case of error. You can check error code in Response.errorCode and Response.errorText

resetPassword

public UserPasswordResponse resetPassword(PasswordSync passwordSync)

Description copied from interface: ProvisionService

Reset password in target systems

Specified by:

resetPassword in interface ProvisionService

Returns:

PasswordResponse

disableUser

public Response disableUser(DisableUserProvisioningRequest request)

Description copied from interface: ProvisionService

Operation to disable user account based on request data

Specified by:

disableUser in interface ProvisionService

Returns:

enableUser

public Response enableUser(EnableUserProvisioningRequest request)

Description copied from interface: ProvisionService

Operation to enable user account based on request data

Specified by:

enableUser in interface ProvisionService

Returns:

searchUser

public LookupUserResponse searchUser(SearchObjectsProvisioningRequest request)

Description copied from interface: ProvisionService

Operation unlocks an account

Specified by:

searchUser in interface ProvisionService

Returns:

startBulkOperation

public Response startBulkOperation(BulkOperationRequest bulkRequest,
                                   boolean async)

Specified by:

startBulkOperation in interface ProvisionService

buildManagedSystemViewer

public ManagedSystemViewerResponse buildManagedSystemViewer(String userId,
                                                            String managedSysId)

Specified by:

buildManagedSystemViewer in interface ProvisionService

requestAdd

public Response requestAdd(ExtensibleUser extUser,
                           Login login)

Description copied from interface: ProvisionService

Adds user directly to a given target system bypassing policy map attributes script logic

Specified by:

requestAdd in interface ProvisionService

Returns:

requestModify

public Response requestModify(ExtensibleUser extUser,
                              Login login)

Description copied from interface: ProvisionService

Modifies user directly in a given target system bypassing policy map attributes script logic

Specified by:

requestModify in interface ProvisionService

Returns:

addEvent

public Response addEvent(ProvisionActionEvent event,
                         ProvisionActionTypeEnum type)

Specified by:

addEvent in interface ProvisionService

testConnectionConfig

public Response testConnectionConfig(String managedSysId)

Description copied from interface: ProvisionService

Operation validates the connection information that was supplied for this managed system

Specified by:

testConnectionConfig in interface ProvisionService

Returns:

getAttributeNamesFromConnector

public List<String> getAttributeNamesFromConnector(String managedSysId,
                                                   boolean attributes)

Specified by:

getAttributeNamesFromConnector in interface ProvisionService

deProvisionUsersToResource

public Response deProvisionUsersToResource(List<String> userIds,
                                           List<String> resourceIds)

Specified by:

deProvisionUsersToResource in interface ProvisionService

retryConnectorRequest

public Response retryConnectorRequest(String replyId)

Specified by:

retryConnectorRequest in interface ProvisionService

provisionUsersToResource

public Response provisionUsersToResource(List<String> userIds,
                                         List<String> resourceIds)

Specified by:

provisionUsersToResource in interface ProvisionService

retryProvisionRequest

public Response retryProvisionRequest(String provisionRequestId)

Description copied from interface: ProvisionService

method used to re-send failed provision request to connector again, important, it does't generate new diff object, it just re-sends what was sent but failed

Specified by:

retryProvisionRequest in interface ProvisionService

Returns: