{ "name": "Admin Helper Form!", "description": "", "modified": "2026-07-26T20:12:44.183880547Z", "modifiedBy": { "type": "IDENTITY", "id": "a5d8bab7bcf44c78b9de71eaf2281cd0", "name": "tylerrettk" }, "definition": { "start": "Define Variable", "steps": { "Define Comparison": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "HTTP Request", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Unoptimized Account Aggregation By Source" } ], "defaultStep": "Define Comparison 1", "displayName": "Check - Unoptimized Account Aggregation", "type": "choice" }, "Define Comparison 1": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "Windows Server", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Reset Accounts By Source" } ], "defaultStep": "Define Comparison 2", "displayName": "Check - Reset Accounts By Source", "type": "choice" }, "Define Comparison 2": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "HTTP Request 1", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Reset Entitlements By Source" } ], "defaultStep": "Define Comparison 3", "displayName": "Check - Reset Entitlements By Source", "type": "choice" }, "Define Comparison 3": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "HTTP Request 2", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Turn Off Health Check By Source" } ], "defaultStep": "Define Comparison 4", "displayName": "Check - Turn Off/On Health Check", "type": "choice" }, "Define Comparison 4": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "Windows Server 1", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Attribute Sync Report By Source" } ], "defaultStep": "Define Comparison 5", "displayName": "Check - Attribute Sync Report", "type": "choice" }, "Define Comparison 5": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "HTTP Request 3", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Bulk Enable All Accounts For An Identity" } ], "defaultStep": "Define Comparison 6", "displayName": "Check - Enable All Accounts By Identity", "type": "choice" }, "Define Comparison 6": { "actionId": "sp:compare-multi-type", "choiceList": [ { "comparator": "StringEquals", "nextStep": "HTTP Request 4", "variableA.$": "$.interactiveForm.formData.selectOption", "variableB": "Bulk Disable All Accounts For An Identity" } ], "defaultStep": "End Step - Failure", "displayName": "Check - Disable Accounts By Identity", "type": "choice" }, "Define Variable": { "actionId": "sp:define-variable", "attributes": { "id": "sp:define-variable", "variables": [ { "description": "", "name": "summaryvariable", "transforms": [], "variableA": "
ℹ️ Click here to view details about each action

Unoptimized Account Aggregation

Triggers an account aggregation for a specific source without optimization. Useful for forcing a full refresh of accounts when standard aggregations might skip unchanged data.
Behind the scenes API Call to /sources/v1/:id/load-accounts with body {\"disableOptimization\":true}

Reset Accounts On Source

Removes all accounts from a target source. This utilizes a custom script to bypass known API limitations (where removing accounts tied to source owners fails), ensuring a complete wipe of accounts by processing them individually.
Behind the scenes PowerShell Script (Individual account removal to bypass known API bug)

Reset Entitlements

Clears out and resets all entitlements associated with a specific source. Ideal for cleaning up stale entitlement data before a fresh aggregation.
Behind the scenes API Call to /entitlements/v1/reset/sources/:id

Turn Off Health Check for a Source

Disables the periodic health checks for a selected source. Helpful when troubleshooting connection issues or when a source is temporarily down and you want to stop health check alerts.
Behind the scenes API PATCH to Source setting disable_health_check:true

Attribute Sync Report By Source (Crystal Ball)

Generates a comprehensive report of all attributes currently synchronized for a given source. Gives administrators visibility into attribute mappings and current states.
Behind the scenes PowerShell Script

Bulk Enable All Accounts For Identities

Quickly enables all accounts across all sources for one or more specific identities in a single action.
Behind the scenes Calls workflow Enable/Disable User In Bulk, which triggers API Call to https://sailpoint.api.identitynow.com/accounts/v1/:id/enable

Bulk Disable Accounts For Identities

Instantly disables all accounts associated with one or more target identities. Essential for rapid offboarding or security containment.
Behind the scenes Calls workflow Enable/Disable User In Bulk, which triggers API Call to https://sailpoint.api.identitynow.com/accounts/v1/:id/disable
" } ] }, "displayName": "", "nextStep": "Interactive Form", "type": "Mutation" }, "End Step - Failure": { "actionId": "sp:operator-failure", "displayName": "", "failureName": "Failure - No Option Selected", "type": "failure" }, "End Step - Success": { "actionId": "sp:operator-success", "displayName": "", "type": "success" }, "Get Identity": { "actionId": "sp:get-identity", "attributes": { "id.$": "$.trigger.launchedBy.id" }, "displayName": "", "nextStep": "Define Comparison", "type": "action", "versionNumber": 2 }, "HTTP Request": { "actionId": "sp:http", "attributes": { "formRequestBody": { "disableOptimization": "true" }, "jsonRequestBody": null, "method": "post", "param_authenticationRef": "oauth", "param_oauth": { "mapping": { "auth_client_id": "clientId", "auth_client_secret": "clientSecret", "auth_credential_location": "credentialLocation", "auth_token_url": "tokenURL" }, "paramID": "6e825815-d032-4764-80c9-06110f732185", "paramType": "1.4", "refID": "747cd7e4-130f-4e22-a25e-8f7fbe63146b" }, "requestContentType": "form", "requestHeaders": { "Content-Type": "multipart/form-data" }, "url": "https://ENTERYOURTENANTNAMEHERE.api.identitynow.com/sources/v1/{{$.interactiveForm.formData.selectSourceForUnoptimizedAggregation}}/load-accounts" }, "displayName": "Unoptimized Account Aggregation HTTP Call", "nextStep": "End Step - Success", "type": "action", "versionNumber": 3 }, "HTTP Request 1": { "actionId": "sp:http", "attributes": { "jsonRequestBody.$": "", "method": "post", "param_authenticationRef": "oauth", "param_oauth": { "mapping": { "auth_client_id": "clientId", "auth_client_secret": "clientSecret", "auth_credential_location": "credentialLocation", "auth_token_url": "tokenURL" }, "paramID": "6e825815-d032-4764-80c9-06110f732185", "paramType": "1.4", "refID": "747cd7e4-130f-4e22-a25e-8f7fbe63146b" }, "requestContentType": "json", "url": "https://ENTERYOURTENANTNAMEHERE.api.identitynow.com/entitlements/v1/reset/sources/{{$.interactiveForm.formData.selectSourceToResetEntitlements}}" }, "displayName": "Reset Source Entitlements HTTP Call", "nextStep": "End Step - Success", "type": "action", "versionNumber": 3 }, "HTTP Request 2": { "actionId": "sp:http", "attributes": { "jsonPatchRequestBody": "[\n {\n \"op\": \"add\",\n \"path\": \"/connectorAttributes/disable_health_check\",\n \"value\": {{$.interactiveForm.formData.enableOrDisableHealthCheck}}\n }\n]", "jsonRequestBody.$": "", "method": "patch", "param_authenticationRef": "oauth", "param_oauth": { "mapping": { "auth_client_id": "clientId", "auth_client_secret": "clientSecret", "auth_credential_location": "credentialLocation", "auth_token_url": "tokenURL" }, "paramID": "6e825815-d032-4764-80c9-06110f732185", "paramType": "1.4", "refID": "747cd7e4-130f-4e22-a25e-8f7fbe63146b" }, "requestContentType": "json-patch+json", "url": "https://ENTERYOURTENANTNAMEHERE.api.identitynow.com/sources/v1/{{$.interactiveForm.formData.selectSourceForHealthCheckModification}}" }, "displayName": "Update Health Check For Source HTTP Call", "nextStep": "End Step - Success", "type": "action", "versionNumber": 3 }, "HTTP Request 3": { "actionId": "sp:http", "attributes": { "jsonRequestBody": { "identityid": "{{$.interactiveForm.formData.selectIdentityToEnableAllAccounts}}", "operation": "enable" }, "method": "post", "param_authenticationRef": "oauth", "param_oauth": { "mapping": { "auth_client_id": "clientId", "auth_client_secret": "clientSecret", "auth_credential_location": "credentialLocation", "auth_token_url": "tokenURL" }, "paramID": "cbd728fe-b51b-4d30-a43d-819666e413ba", "paramType": "1.4", "refID": "31762080-32eb-47f8-9217-0e08dacc5d24" }, "requestContentType": "json", "url": "https://ENTERYOURTENANTNAMEHERE.api.identitynow.com/v2024/workflows/execute/external/c7ec8ce8-100b-44ab-9241-56b7741b08b9" }, "displayName": "Call Enable Workflow", "nextStep": "End Step - Success", "type": "action", "versionNumber": 3 }, "HTTP Request 4": { "actionId": "sp:http", "attributes": { "jsonRequestBody": { "identityid": "{{$.interactiveForm.formData.SelectIdentityToDisableAllAccounts}}", "operation": "disable" }, "method": "post", "param_authenticationRef": "oauth", "param_oauth": { "mapping": { "auth_client_id": "clientId", "auth_client_secret": "clientSecret", "auth_credential_location": "credentialLocation", "auth_token_url": "tokenURL" }, "paramID": "cbd728fe-b51b-4d30-a43d-819666e413ba", "paramType": "1.4", "refID": "31762080-32eb-47f8-9217-0e08dacc5d24" }, "requestContentType": "json", "url": "https://ENTERYOURTENANTNAMEHERE.api.identitynow.com/v2024/workflows/execute/external/c7ec8ce8-100b-44ab-9241-56b7741b08b9" }, "displayName": "Call Disable Workflow", "nextStep": "End Step - Success", "type": "action", "versionNumber": 3 }, "Interactive Form": { "actionId": "sp:interactive-form", "attributes": { "formDefinitionId": "771facd8-edbf-4bbd-82fc-e0f61a5e88e7", "inputForForm_optiondescription.$": "$.defineVariable.summaryvariable", "interactiveProcessId.$": "$.trigger.interactiveProcessId", "ownerId.$": "$.trigger.launchedBy.id", "title": "Admin Helper Form!" }, "displayName": "", "nextStep": "Get Identity", "type": "action", "versionNumber": 1 }, "Windows Server": { "actionId": "sp:pag-windows-server", "attributes": { "inputForPag_address": "192.168.0.180", "inputForPag_auth_type": "ntlm", "inputForPag_checksum": null, "inputForPag_command_timeout_seconds": 3600, "inputForPag_configuration_name": "Microsoft.PowerShell", "inputForPag_kdc_port": 88, "inputForPag_kdc_protocol": "udp", "inputForPag_output_format": "text", "inputForPag_script_arguments": { "SourceId": "{{$.interactiveForm.formData.selectSourceToResetAccounts}}" }, "inputForPag_script_path": "C:\\Scripts\\ResetAccountsBySource.ps1", "inputForPag_use_ssl": true, "inputForPag_verify_cert": false, "pagCommandType": "pag:windows_server:execute_powershell_script", "pagInstanceId": "89a905a7-f270-46c4-9390-17852197b306", "pagSpecId": "7e479f41-e367-4e20-85c8-9e2936aa4658", "param_connType": "paramInline", "param_credential": { "mapping": { "auth_password": "password", "auth_username": "username" }, "paramID": "4228baed-9720-4e06-a08d-87efc1c1c4a0", "paramType": "1.1", "refID": "c67b4974-6afe-404b-ae85-38e2c9b47b87" }, "param_credentialType": "paramSPS", "param_kerberosType": "paramInline" }, "displayName": "Reset Accounts By Source PS Script", "nextStep": "End Step - Success", "type": "action", "versionNumber": 1 }, "Windows Server 1": { "actionId": "sp:pag-windows-server", "attributes": { "inputForPag_address": "192.168.0.180", "inputForPag_auth_type": "ntlm", "inputForPag_checksum": null, "inputForPag_command_timeout_seconds": 3600, "inputForPag_configuration_name": "Microsoft.PowerShell", "inputForPag_kdc_port": 88, "inputForPag_kdc_protocol": "udp", "inputForPag_output_format": "text", "inputForPag_script_arguments": { "RecipientEmail": "{{$.getIdentity.attributes.email}}", "SourceId": "{{$.interactiveForm.formData.selectSourceForAttributeSyncReport}}" }, "inputForPag_script_path": "C:\\Scripts\\AttributeSyncReport.ps1", "inputForPag_use_ssl": true, "inputForPag_verify_cert": false, "pagCommandType": "pag:windows_server:execute_powershell_script", "pagInstanceId": "89a905a7-f270-46c4-9390-17852197b306", "pagSpecId": "7e479f41-e367-4e20-85c8-9e2936aa4658", "param_connType": "paramInline", "param_credential": { "mapping": { "auth_password": "password", "auth_username": "username" }, "paramID": "4228baed-9720-4e06-a08d-87efc1c1c4a0", "paramType": "1.1", "refID": "c67b4974-6afe-404b-ae85-38e2c9b47b87" }, "param_credentialType": "paramSPS", "param_kerberosType": "paramInline" }, "displayName": "Attribute Sync Report PS Script", "nextStep": "End Step - Success", "type": "action", "versionNumber": 1 } } }, "creator": { "type": "IDENTITY", "id": "a5d8bab7bcf44c78b9de71eaf2281cd0", "name": "tylerrettk" }, "trigger": { "type": "EVENT", "attributes": { "filter.$": "$[?(@.workflowId == '2cee7512-36eb-4ae5-bd64-93b5a6f15b45')]", "id": "idn:interactive-process-launched", "integrationId": null } } }