Using the Authentication Manager SDK to search for users or groups in All Identity Sources

[#1]

Article Number

000039657

Applies To

RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager SDK
RSA Version/Condition: 8.x

Issue

•  RSA Authentication Manager SDK Documentation states that the special GUID Global.ALL_IDENTITY_SOURCES_ID may be specified within the SearchPrincipalsCommand, to search all identity sources instead of specifying the GUID of one identity source.
• The special GUID Global.ALL_IDENTITY_SOURCES_ID will work if there is Java, but for other coding languages, this value does not exist.

 

Resolution

As a workaround, the customer can use the GUID value of ims.0000-ID-Source-All-0000 to state that this is referring to all identity sources in the system. 

As an example, when connecting to the WSDL of the RSA Authentication Manager:
 

$SystemFilter = New-Object mjb.Filter
$SystemFilter.comp = New-Object mjb.Empty

$SearchPrincipalsCommand = New-Object mjb.SearchPrincipalsCommand
$SearchPrincipalsCommand.limit = 100
$SearchPrincipalsCommand.identitySourceGuid = 'ims.0000-ID-Source-All-0000'
$SearchPrincipalsCommand.securityDomainGuid = 'ims.000000000000000000001000e0011000'
$SearchPrincipalsCommand.systemFilter = $SystemFilter
$SearchPrincipalsCommand.searchSubDomains = $true

$SearchPrincipalsCommand = $CommandServer.executeCommand($loginCommand.sessionId, $SearchPrincipalsCommand)