Active Roles 7.2 - SPML Provider Administrator Guide

Cannot remove the specified item because it was not found in the specified Collection Some of the specified attributes for the '<object class name>’ object class are not defined in the schema

What’s new

Support for Active Roles controls

Using Active Roles SPML Provider > Support for Active Roles controls

Active Roles implements special parameters called Active Roles controls (hereafter controls). The controls allow you to customize request processing.

In proxy mode, SPML Provider clients can send controls to the Active Roles Administration Service with an SPML request to perform an administrative operation. The Administration Service can process the controls. On the other hand, the Administration Service can return its own control to the SPML Provider client, and then the client can process that control. The controls a client sends to the Administration Service are referred to as InControls whereas the controls the Administration Service returns to the client are referred to as OutControls.

This section covers the following subjects:

Sending the InControl-type controls to the Active Roles Administration Service with an SPML request.
Specifying a set of the OutControl-type controls that the Active Roles Administration Service will return with an SPML response.

For more information about Active Roles controls and for the list of available built-in controls, see Active Roles SDK.

IMPORTANT: All elements described in this section must be defined at the beginning of your SPML request. For a sample of use, see later in this document.

Sending controls to the Active Roles Administration Service

Using Active Roles SPML Provider > Support for Active Roles controls > Sending controls to the Active Roles Administration Service

This section covers the controls and control XML elements that your SPML request must include to send controls to the Active Roles Administration Service.

Element name: controls

Element description: Specifies a collection of InControl-type controls to send to Administration Service.

Child elements: control

Attributes:

Table 2: Controls attributes
attribute name	attribute description
xmlns	Declares the namespase for all child elements of the controls element. This attribute must be set to quest:ars:SPML:2:0

Element name: control

Element description: Describes a control to send to the Administration Service.

Parent elements: controls

Child elements: None

Attributes:

Table 3: Control attributes
attribute name	attribute description
name	Specifies the name of the control.

The control value in the control element body must be specified as follows:

<control name=%control name%>%control value%</control>

To send an empty control, use the following syntax:

Specifying controls to return to the SPML Provider client

Using Active Roles SPML Provider > Support for Active Roles controls > Specifying controls to return to the SPML Provider client

This section covers the controlsForOutput and control XML elements that your SPML request must include to specify a set of controls to return to the SPML Provider client.

Element name: controlsForOutput

Element description: Specifies a collection of OutControl-type controls to return to SPML client.

Child clements: control

Attributes:

Table 4: Attributes for controlsForOutput
attribute name	attribute description
xmlns	Declares the namespase for all child elements of the controls element. This attribute must be set to quest:ars:SPML:2:0

Element name: control

Element description: Describes a control to return to SPML Provider client with an SPML response.

Parent elements: controlsForOutput

Child elements: None

Attributes:

Table 5: Attributes for control
attribute name	attribute description
name	Specifies the name of the control.

The control elements used to specify controls to return with SPML response must be defined as follows:

Sample SPML request

Using Active Roles SPML Provider > Support for Active Roles controls > Sample SPML request

This section provides a sample SPML request and the SPML response that illustrate how to use Active Roles controls in your SPML requests.

This sample shows how an SPML Provider client can send a request to modify the specified user object. With this request, the client sends the AllowApproval built-in control set to Confirm, and the CustomControl control set to MyCustomValue. The request also contains the controlsForOutput element, which specifies that Active Roles Administration service will return values of the OperationStatus and CustomControl controls in the SPML response.

TIP: For more information about the use of the AllowApproval and OperationStatus controls, refer to the Active Roles SDK.

NOTE: You need to modify the sample SPML request in order to adjust it to your environment. Before using this sample, set the ID attribute of the psoID element to the distinguished name of the user account you want to modify.

SPML request

<?xml version="1.0"?>

<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">

<soap:Body>

<spml:modifyRequest xmlns:spml="urn:oasis:names:tc:SPML:2:0">

<control name="AllowApproval">Confirm</control>

<control name="CustomControl">MyCustomValue</control>

</controls>

</controlsForOutput>
<spml:psoID ID="CN=JDOE,OU=Users,DC=mycompany,DC=com"/>

<spml:modification>
<modification name="description" operation="replace" xmlns="urn:oasis:names:tc:DSML:2:0:core">

<value>New description</value>

</modification>

</spml:modification>

</spml:modifyRequest>

</soap:Body>

</soap:Envelope>

SPML response

<?xml version="1.0" encoding="UTF-16"?>

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">

<soap:Body>

<control name="OperationStatus">Completed</control>

<control name="CustomControl">ReturnedValue</control>

</controls>

<pso>

<data>

<value xsi:type="xsd:string">Admin1</value>

</attr>

<value xsi:type="xsd:string">person</value>

<value xsi:type="xsd:string">organizationalPerson</value>

</attr>

<value xsi:type="xsd:string">CN=Person,CN=Schema,CN=Configuration,DC=dom,DC=lab,DC=local</value>

</attr>

<value xsi:type="xsd:base64Binary">Aodvua6TAE+Ja9O3vnRntg==</value>

</attr>

<value xsi:type="xsd:string">New description</value>

</attr>

</data>

</pso>

</modifyResponse>

</soap:Body>

</soap:Envelope>

Supported Azure Features

Active Roles 7.2 SPML Provider supports Azure user, group, and contact creation.

Sample SPML request for Azure user and Azure group

Sample SPML request for Azure User Creation

<?xml version="1.0"?>

<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">

<soap:Body>

<data>

<value>AzureUser</value>

</attr>

<value>Azure test user</value>

</attr>

<value>AzureUser</value>

</attr>

</attr>

<value>AzureUser@ARStestdev.onmicrosoft.com</value>

</attr>

</attr>

</attr>

<value>FALSE</value>

</attr>

<value>AzureUser@ARStestdev.onmicrosoft.com</value>

</attr>

</attr>

<value>AzureUser@ARStestdev.onmicrosoft.com</value>

</attr>

</attr>

<value>AzureUser</value>

</attr>

</data>

</addRequest>

</soap:Body>

</soap:Envelope>

Sample SPML request for Azure Group Creation.

<?xml version="1.0"?>

<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">

<soap:Body>

<data>

<value>group</value>

</attr>

<value>My test group</value>

</attr>

<value>false</value>

</attr>

<value> GroupName@company.com</value>

</attr>

<value> GroupName</value>

</attr>

</attr>

<value> GroupName</value>

</attr>

<value>false</value>

</attr>

</attr>

</data>

</addRequest>

</soap:Body>

</soap:Envelope>

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Active Roles 7.2 - SPML Provider Administrator Guide

Support for Active Roles controls

Sending controls to the Active Roles Administration Service

Specifying controls to return to the SPML Provider client

Sample SPML request

SPML request

SPML response

Supported Azure Features

Sample SPML request for Azure user and Azure group