Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Identity Manager 8.2.1 - API Development Guide

Basic principles of API development Examples and help – Software Development Kit API configuration Implementing your own APIs API Designer Quick start – Creating an API with the API Designer Working with the API Designer
Starting the API Designer Project types User interface Global settings Database objects Labeling changes Find and replace Multilingual captions Managing database queries Managing tabs Managing layouts Displaying the change history (command list) Bookmarks Compiling an API Managing versions (compilation branches) Testing an API Linking C# projects to the API Designer
API projects API methods ImxClient command line program

Response codes

Responses that are sent from the REST API use the following codes. If queries fail, an explanatory error message is displayed.

Response codes

Description

200

Query successful.

204

Query successful. Response has no content.

401

Access not authorized. The session must be authorized first.

404

The given resource could not be found.

405

The HTTP method used is not allowed for this query.

500

A server error occurred. The error message is sent with the response. On the ground of security, a detailed error message is not included in the response. For more information, see the application log file on the server.

Related topics

General notes and information about entity methods

In this section, you will find advice and information for creating and implementing entity methods.

Limiting results

NOTE: Entity-based methods normally work with a limit to avoid unintentionally loading extremely large amounts of data.

The following query parameters help you to limit the amount of data that is returned by obtaining multiple data sets from sequential responses:

Query parameter Default value Description
PageSize 20

Specifies the maximum number of data sets that can be contained in the response.

If you only determine the total number and do not want to obtains single data sets, use the value -1.

StartIndex 0

Specifies as from which data sets the results are returned in the response.

This parameter is null-based (the first element is addressed with the value 0).

Example

The following query returns 50 employees and starts with the 101st employee:

https://<host name>/ApiServer/portal/person?PageSize=50&StartIndex=100

Sort order

You can use the Orderby query parameter to sort the results returned in a response. This parameter allows you to sort the column names of the underlying database table.

Examples

The following query returns employees sorted by first name in ascending order:

https://<host name>/ApiServer/portal/person?OrderBy=FirstName

Employees sorted in descending order by first name:
https://<host name>/ApiServer/portal/person?OrderBy=FirstName%20DESC

Filtering

You can use the filter query parameter to filter the results returned in a response. A filter like this consists of a JSON formatted string that must contain the following:

  • ColumnName: Name of the column used to filter
  • CompareOp: The operator for comparing the contents of the selected column with the expected value

    The following comparison operators are permitted:

    • Equal: The results only include data sets with column data that matches the comparison value.

    • NotEqual: The results only include data sets with column data that does NOT match the comparison value.

    • LowerThan: The results only include data sets with column data less than the comparison value.

    • LowerOrEqual: The results only include data sets with column data less than or equal to the comparison value.

    • GreaterOrEqual: The results only include data sets with column data greater than or equal to the comparison value.

    • Like: Requires the use of a percent sign (%) as a placeholder. You can enter up to two percent signs in this value. The results only include data sets with column data that matches the comparison value pattern.

    • NotLike: Requires the use of a percent sign (%) as a placeholder. You can enter up to two percent signs in this value. The results only include data sets with column data that does NOT match the comparison value pattern.

    • BitsSet: The value is compared to the comparison value using the AND (&) logical operator. The result must not be equal to 0.

    • BitsNotSet: The value is compared to the comparison value using the AND (&) logical operator. The result must be equal to 0.

  • Value1: Comparison value for comparing the contents of the column

  • Value 2: If this second comparison value is passed down, the value of CompareOp is ignored and all the values that are greater or equal to Value1 and less or equal to Value2 are determined.

Example

The following query returns all employees with the last name "User1":

https://<host name>/ApiServer/portal/person/all?filter=[{ColumnName: 'LastName', CompareOp: 'Equal', Value1: 'User1'}]

Grouping

You can use the group path parameter to group the results returned in a response. You can use the by query parameter to specify which attribute to use for grouping. Furthermore, you can use the withcount query parameter to specify (values: true or false) whether to calculate the number of objects for each group. This may increase the runtime.

NOTE: The API method must support grouping (by using the EnableGrouping parameter).

The result of the query contains a filter condition that you can pass to the URL parameter as filter.

Example

The following queries determine the number of identities grouped by primary location:

https://<host name>/ApiServer/portal/person/all/group?by=UID_Locality&withcount=true

Response:

{
    {
        "Display": "(No value: Primary location)",
        "Filters": [
            {
                "ColumnName": "UID_Locality",
                "CompareOp": 0
            }
        ],
        "Count": 42
    },
    {
        "Display": "Berlin",
        "Filters": [
            {
                "ColumnName": "UID_Locality",
                "CompareOp": 0,
                "Value1": "c644f672-566b-4ab0-bac0-2ad07b6cf457"
            }
        ],
        "Count": 12
    }
}
Hierarchical data structure

Some data model tables are defined as hierarchical structures (Department for example). Data from such tables is loaded from a specific hierarchy level.

You can use the parentKey query parameter of the parent object to specify the hierarchy level.

Example

The following query determines the service categories directly below the Access Lifecycle service category:

https://<host name>/ApiServer/portal/servicecategories?parentKey=QER-f33d9f6ec3e744a3ab69a474c10f6ff4

The following query determines the service categories that do not have a parent service category:

https://<Host-Name>/ApiServer/portal/servicecategories?parentKey=

The following query determines all service categories regardless of their hierarchy:

https://<Host-Name>/ApiServer/portal/servicecategories

You can use the noRecursive path parameter to specify whether the data is queried as a flat list (values: true or false).

Example

https://<host name>/ApiServer/portal/servicecategories?noRecursive=true

Additional query parameters

You can use the withProperties query parameter to specify whether additional information from specific tables columns are returned in the response.

NOTE: To enable table columns for these queries, set the Show in wizards option in the column properties of the relevant columns in the Designer.

TIP: You can delimit the names of multiple columns with commas.

Example

The following query determines the number of all identities and also returns their preferred name and title:

https://<host name>/ApiServer/portal/person/all?withProperties=PreferredName,Title

Response:

{
    "TotalCount": 105950,
    "TableName": "Person",
    "Entities": [
        {
            "Display": "100, User (USER1)",
            "LongDisplay": "100, User (USER1)",
            "Keys": [
                "bbf3f8e6-b719-4ec7-be35-cbd6383ef370"
            ],
            "Columns": {
                "DefaultEmailAddress": {
                    "Value": "USER1@qs.ber",
                    "IsReadOnly": true
                },
                "IdentityType": {
                    "Value": "Primary",
                    "IsReadOnly": true,
                    "DisplayValue": "Primary identity"
                },
                "PreferredName": {
                    "Value": "User1",
                    "IsReadOnly": true
                },
                "Title": {
                    "Value": "Dr.",
                    "IsReadOnly": true
                },
                "XObjectKey": {
                    "Value": "<Key><T>Person</T><P>bbf3f8e6-b719-4ec7-be35-cbd6383ef370</P></Key>",
                    "IsReadOnly": true
                }
            }
}
Related topics

Avoiding deadlocks

API development includes a lot of asynchronous code with async/await constructs. To avoid deadlocks, use the ConfigureAwait(false) method for every await keyword.

For more information, see https://blog.stephencleary.com/2012/07/dont-block-on-async-code.html and https://devblogs.microsoft.com/dotnet/configureawait-faq/.

Examples and help – Software Development Kit

To make it easier for you to start developing your API with the API Designer, One Identity provides a Software Development Kit (SDK) with lots of commented code example.

The SDK can be found on the installation medium in the directory QBM\dvd\AddOn\ApiSamples.

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation