PyISIM

Python client for IBM Security Identity Manager (ISIM / ITIM) web services (SOAP and REST APIs)
Tested on ISIM 7.0.1 FP13 and ISIM 7.0.2 FP2 Due to API limitations some functionalities are served through ISIM's REST API and some other through ISIM SOAP Web Services.

Docs

You can read the full documentation here

Examples

Look for the tests/ folder in our Github repo to see some more detailed examples.

• Login

from pyisim.auth import Session
user="itim manager"
password="secret"
cert="./my_certificate.cer"
url="iam.isim.com"
sess=Session(url,user,password,cert)

Every example after assumes you have already a valid Session object named sess

• Creating people

from pyisim.entities import Person
info_persona={
    "employeenumber": "1015463230",
    "correo": "cazdlt@gmail.com",
    "title": "Especialista de producto",
    "departmentnumber":"IBM",
}
persona = Person(sess, person_attrs=info_persona)
persona.add(sess,"my org","my justification")

• Modifying people

from pyisim import search
persona = search.people(sess,Person,"employeenumber","1015463230",limit=1)[0]
persona.title="CEO"
persona.modify(sess,"my justification")

• Custom Person/BPPerson entities

from pyisim import Person
from pyisim import search

class MyBPPerson(Person):

    profile_name="BPPerson"

    def __init__(self,info,first_name=None):
        if first_name is None:
                first_name = "Andrés"
        info["givenname"] = first_name

        super().__init__(person_attrs=info)

MyBPPerson({"sn":"Zamora"}).add(sess,"my org","New BPPerson")

• Access request

from pyisim import search
accesses=search.access(sess,search_filter="*Consulta*",limit=5)
person=search.people(session,by="givenname",search_filter="Juan",limit=1)[0]
response=person.request_access(session,accesses,"justification")
request_id=response.request.id # easily get request id

• Approve activity

request_id="9585474949338"
actividad=search.activities(session,by="requestId",search_filter=request_id,limit=1)[0]
actividad.complete(sess,"approve","justification")

• Fulfill RFI

request_id="123483274614"
form=[
    {
        "name":"description",
        "value":[dn_rol],
    },
    ...
]
actividad=search.activities(session,by="requestId",search_filter=request_id)[0]
actividad.complete(sess,form,"justification")

• Update property files (ISIM VA)

from pyisim.va.auth import VASession
from pyisim.va.configure import update_property


u="admin@local"
p="secret"
url="iam.isimva.com"
cert="./mycert.cer"

s=VASession(u,p,url,cert)

property_file="CustomLabels.properties"
property_name="scriptframework.properties"
property_value="ITIM.java.access.util"
update_property.create_or_update_property(s,property_file,property_name,property_value)

Functionalities

• ISIM VA Utilities:
  • Authentication
  • Create/Search/Update property files

TODO

in priority order

1. Add operations to services
   • DN Lookup
   • Add
   • Modify
   • Delete
   • Test connection
2. Add some complex use cases to the documentation
3. Consider using dictionaries as search filters