sohnemann/idn-admin-console

This tool is build to help the community to manage SailPoint IdentityNow (IDN).

IDN Admin Console

This application is not developed, maintained or supported by SailPoint. It is built and based on a community effort.

This tool is build to help the community to manage SailPoint IdentityNow (IDN).

Badges

GitHub

Builds

Pull

Release

Docker

Release

You can download the latest Windows/Mac/Linux build from Release page

Latest Docker Build can be found at Docker Hub page

NOTE: Currently the builds are not code-singed. For Mac, please download and unzip, right click and open for the first time. Then you can open normally for subsequent uses.

Authentication

You require {tenant} and PAT ID and Token as mentioned in this guide. PAT ID and Token must be of an ORG_ADMIN User or have sp:scopes:all scope

Alternatively if you have an internal domain other than identitynow.com please fill it in the domain name section of login.

NOTE: For Vanity URL's please find your {tenant} as per the article and use that. DO NOT fill in your vanity URL domain in the Domain Name section.

Dev: When using on your own computer you can use variables to auto login. This can save you a lot of time as there is no way you can remember your tokens. Using your local variables it should make sure that you dont ever push to production an auto login feature. You can create a run.bat or run.sh and put the following variables

set NG_APP_ENV=true

set NG_APP_TENANT_NAME=tenantName

set NG_APP_CLIENT_ID=af5783client

set NG_APP_CLIENT_SECRET=secret

ng serve --open

Contribute

We are looking for (list is not exhaustive)

• Help from community if they are interested in spreading the word
• Help us build more features and extend existing ones.
• GitHub and Actions know-how to help management and auto build / deploy / version et al
• Help us make the Angular framework better and plug holes if any. Upgrade existing versions and remove non used dependencies.
• Help us enhance it (pagination, current build documentation / standardizing and refactoring code et al .. list is endless)
• Testing, finding, and reporting and hopefully help fixing bugs - we are bound to find lot of issues to being with.
• Looking for contributors for the repo to help us set it up properly.

Features

• Identity
  • Identity Info (Get Identity Details / Get Manager Details / Refresh Single Identity / Download Report)
  • Manage Identity Profile (Move Priority / Refresh Individual Profile / Export All)
  • Manage Identity Attribute Index (Index Attributes / Unindex Attributes)
  • Manage Transforms (Add / Update / Delete / Download / Export All)
  • Manage LCS (Delete / Download / Export All)
• Find Multiple Accounts in Source and Download Report
• Access Profiles
  • Manage Access Profiles (Enable / Disable / Delete / Export All)
  • Manage Access Profile Owners (Update)
• Roles
  • Manage Roles (Enable / Disable / Mark As Requestable / Unmark As Requestable / Delete / Export All)
  • Manage Role Owners (Update)
  • Duplicate Role (Good for Testing / Troubleshooting Membership Criteria)
• Sources
  • Manage Aggregation Schedules (Enable / Disable / Backup and Restore Accounts & Entitlement Schedules)
  • Manage Source Owners (Update)
  • Run Aggregations (Unoptimized / File Upload)
  • Manage Create Profile (Add Attribute / Delete Attribute / Download / Export All)
  • Reset Source (Accounts / Entitlements / Both)
  • Source Info (Internal Name / ID / Count / Export All)
• Rules
  • Manage Cloud Rules (Download / Export All / Created Date / Last Modifed Date)
  • Manage Connector Rules (Add / Update / Delete / Download / Export All / Created Date / Last Modifed Date)
• Requests
  • Access Request Status (List / Download Report)
  • Access Request Approval Forward (Forward Pending Requests / Download Report)
• Work Items
  • Work Items Status (List / Search via Requested For / Download Report)
  • Work Items Pending Forward (Forward Pending Work Items / Download Report)
• Misc
  • Manage Entitlements (Add Owner / Update Owner / Delete Owner / Mark As Requestable / Unmark as Requestable / Mark as Privileged / Unmark as Privileged)
  • Manage Admins (List all admins / Revoke All Permissions / Check if they have PAT token)
  • Manage PAT (See Permission / Last Usage Date / Delete Token)
  • Check and Set Org Time
  • Org Statistics (Pretty cool to see)

Screenshots

Development

Any code modificaiton should run via Lint and Format process. GitHub Actions will check this on all PR and merge requests but you can fix it locally by running the following command

Lint

npm run lint

Code Format

npm run format

Manual Build

The application can be run as a standalone web application, inside docker container or packaged as an electron application (desktop app style). Follow the steps below to get it up and running in your preferred environment.

Run as Standalone App

• Prerequisites
  • Install nodejs
  • Install Angular CLI
    • npm install -g @angular/cli
  • Run command in root directory:
    • npm install
• Build Package
  • npm run build
• Run in local
  • ng serve --open
  • Will open URL in browser: http://localhost:4200

Local Variables

You can define NG_APP_IDENTITY_SEARCH variable if you want additional attributes to search for getting Identity Info

Run as electron app

• Prerequisites
  • sudo su
  • npm install electron-packager -g
  • brew install --cask wine-stable
• Run in local
  • npm run build
• Build electron package for Mac OS
  • npm run build
  • electron-packager . --platform=darwin --overwrite
• Build electron package for Windows
  • npm run build
  • electron-packager . --platform=win32 --overwrite

Run as container app

• Prerequisites
  • Install docker
• Run in local
  • npm run build
  • docker build -t idn-admin-console-image .
  • docker run --name idn-admin-console-container -d -p 8080:80 idn-admin-console-image
  • Type URL in browser: http://localhost:8080
  • To stop container
    • docker stop idn-admin-console-container
  • To remove container
    • docker rm idn-admin-console-container
  • To delete image
    • docker rmi idn-admin-console-image

📝 License

This project is MIT licensed.