8.1 Sample Deployment of REST Driver for Salesforce

In Designer, double-click the connector.

In the Properties screen that appears, select Driver Configuration from the left pane.

In the Driver Configuration screen, select Driver Parameters tab.

Select Subscriber Options. The Resources section appears.

Add Configure Resource to Synchronize instance, by clicking the icon.

Provide a schema name, for example <User>, as shown in the image to configure handlers.

Set the Configure Handlers to Custom, and click instance_1 to add the schema name.

Add a Rest Handler Details instance by clicking the icon, and specify the details as shown in the following table:

Example: For adding a user, enter services/data/<v20.0>/sobjects/User as the URL extension, set the Operation as ADD, and Method as POST. This URL extension is appended to the base URL, so that the URL generated to perform the add user operation is https://<ap17>.salesforce.com/services/data/<v20.0>/sobjects/User

Click OK.

Select the REST Driver Object in designer.

Select Outline tab.

Select Input from the transformation diagram. This shows you all the input transformation policies.

Select the NETQRESTDCFG-itp-AddAssociation policy from the Policy Set tab, and disable all the rules that are present.

Create a new policy by clicking to add a new input transformation policy, and name it as NETQREST-itp-UpdateAssociation. This policy will add the association to the new User or Group, and must be imported into the Input Transformation on Publisher Channel.

After the policy is added, navigate to the XML Source tab.

Copy the following content into the display area.

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE policy PUBLIC "policy-builder-dtd" "C:\netiq\idm\apps\Designer\plugins\com.novell.idm.policybuilder_4.0.0.202002050656\DTD\dirxmlscript4.8.dtd"><policy xmlns:es="http://www.novell.com/nxsl/ecmascript">
      <rule>
            <description>Check For Association - ADD</description>
            <conditions>
                  <and>
                        <if-operation op="equal">status</if-operation>
                        <if-xpath op="true">driver-operation-data/response/url-token[@association]</if-xpath>
                        <if-xpath op="not-true">driver-operation-data[@command='modify']</if-xpath>
                  </and>
            </conditions>
            <actions>
                  <do-set-local-variable name="vl-response">
                        <arg-string>
                              <token-xpath expression=".[@level='success']/driver-operation-data[@command='add']/response/value[last()]/text()"/>
                        </arg-string>
                  </do-set-local-variable>
                  <do-set-local-variable name="vl-association">
                        <arg-node-set>
                              <token-split delimiter='"'>
                                    <token-local-variable name="vl-response"/>
                              </token-split>
                        </arg-node-set>
                  </do-set-local-variable>
                  <do-add-association>
                        <arg-dn>
                              <token-xpath expression="driver-operation-data/@dest-dn"/>
                        </arg-dn>
                        <arg-association>
                              <token-xpath expression="$vl-association[4]"/>
                        </arg-association>
                  </do-add-association>
            </actions>
      </rule>
</policy>

Click the Policy Builder tab. The new policy screen appears.

Save all your changes.

Similarly, customize the Output transformation policies by selecting Output in the transformation diagram.

Add the following three rules to the NETQRESTJSON-otp-XDStoJSON policy xml, to appear above the Translate XDS to JSON rule.

<rule>
            <description>Remove association and password</description>
            <comment xml:space="preserve">Remove association and password</comment>
            <conditions>
                  <and>
                        <if-operation mode="nocase" op="equal">add</if-operation>
                  </and>
            </conditions>
            <actions>
                  <do-strip-xpath expression="association"/>
                  <do-strip-xpath expression="operation-data/password-subscribe-status/association"/>
                  <do-strip-xpath expression="password"/>
            </actions>
      </rule>
      <rule>
            <description>populate mandatory attributes</description>
            <comment xml:space="preserve">populate mandatory attributes</comment>
            <conditions>
                  <and>
                        <if-operation mode="nocase" op="equal">add</if-operation>
                        <if-class-name mode="nocase" op="equal">User</if-class-name>
                  </and>
            </conditions>
            <actions>
                  <do-add-dest-attr-value class-name="User" name="TimeZoneSidKey">
                        <arg-value type="string">
                              <token-text xml:space="preserve">Asia/Kolkata</token-text>
                        </arg-value>
                  </do-add-dest-attr-value>
                  <do-add-dest-attr-value class-name="User" name="LocaleSidKey">
                        <arg-value type="string">
                              <token-text xml:space="preserve">en_US</token-text>
                        </arg-value>
                  </do-add-dest-attr-value>
                  <do-add-dest-attr-value class-name="User" name="EmailEncodingKey">
                        <arg-value type="string">
                              <token-text xml:space="preserve">ISO-8859-1</token-text>
                        </arg-value>
                  </do-add-dest-attr-value>
                  <do-add-dest-attr-value class-name="User" name="ProfileId">
                        <arg-value type="string">
                              <token-text xml:space="preserve">00e2v000004F2XO</token-text>
                        </arg-value>
                  </do-add-dest-attr-value>
                  <do-add-dest-attr-value class-name="User" name="LanguageLocaleKey">
                        <arg-value type="string">
                              <token-text xml:space="preserve">en_US</token-text>
                        </arg-value>
                  </do-add-dest-attr-value>
            </actions>
      </rule>
      <rule>
            <description>remove attrs from event</description>
            <comment xml:space="preserve">remove attrs from event</comment>
            <conditions>
                  <and>
                        <if-operation mode="nocase" op="equal">modify</if-operation>
                  </and>
            </conditions>
            <actions>
                  <do-strip-xpath expression="modify-attr/remove-value/value"/>
                  <do-strip-xpath expression="modify-attr/remove-value"/>
            </actions>
      </rule>

Select NETQRESTJSON-otp-XDStoJSON policy in the Policy window to create a new policy below it.

Create a new policy by clicking in the Policy window, and name it NETQREST-otp-datatransformation.

Double click the newly created NETQREST-otp-datatransformation policy, and navigate to XML Source tab in the right pane.

Paste the following xml content for this policy in the display area.

<?xml version="1.0" encoding="UTF-8"?><policy>
      <rule>
            <description>remove array identifiers</description>
            <comment xml:space="preserve">remove array identifiers</comment>
            <conditions>
                  <and>
                        <if-xpath op="true">../driver-operation-data/request/value</if-xpath>
                  </and>
            </conditions>
            <actions>
                  <do-set-local-variable name="valueattribute" scope="policy">
                        <arg-string>
                              <token-xpath expression="request/value"/>
                        </arg-string>
                  </do-set-local-variable>
                  <do-strip-xpath expression="request/value"/>
                  <do-append-xml-element expression="request" name="value"/>
                  <do-append-xml-text expression="request/value" notrace="true">
                        <arg-string>
                              <token-replace-all regex='\"\}\,' replace-with='",'>
                                    <token-replace-all regex="\}\}" replace-with="}">
                                          <token-replace-all regex='\{\"add\"\:' replace-with="">
                                                <token-replace-all regex="\]" replace-with="">
                                                      <token-replace-all regex="\[" replace-with="">
                                                            <token-local-variable name="valueattribute"/>
                                                      </token-replace-all>
                                                </token-replace-all>
                                          </token-replace-all>
                                    </token-replace-all>
                              </token-replace-all>
                        </arg-string>
                  </do-append-xml-text>
            </actions>
      </rule>
</policy>

Save all your changes and deploy these policies to Identity Manager. This customized REST driver will manage Salesforce system for all the use cases mentioned above.