Active Directory Group Creation via Web Services - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This guide outlines the procedure for creating Active Directory endpoint groups using Web Services. It is intended for administrators who need to automate endpoint group management or perform custom integrations with Identity Manager.

Environment

Identity Manager 14.5

Resolution

1. Configure your Web Services client with the necessary administrative credentials (imadmin).
2. Define the target namespace and endpoint path in the SOAP body: ADSOrgUnit=Groups,EndPoint=MyADEndpoint,Namespace=ActiveDirectory,Domain=im,Server=Server
3. Modify the following parameters in the request template with your specific environment details:
   • Group Name: The name of the group to be created.
   • Group Type: Set to Global or the appropriate group scope.
   • Security Type: Set to Security.
4. Execute the SOAP request against the Identity Manager Web Services endpoint.
5. Verify the group creation within the Active Directory management console.

 

This sample SOAP request will create an Active Directory group.  It should be modified with environment specific details.  It can also be used as a sample to create groups on other endpoint types using the appropriate Create Group task for that endpoint type.

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsdl="http://tews6/wsdl">

   <soapenv:Header/>

   <soapenv:Body>

      <wsdl:TaskContext>

         <wsdl:admin_id>imadmin</wsdl:admin_id>

         <wsdl:admin_password>password</wsdl:admin_password>

      </wsdl:TaskContext>

      <wsdl:CreateActiveDirectoryGroup>

    <wsdl:CreateActiveDirectoryGroupSearch>

            <wsdl:CreateNew>TRUE</wsdl:CreateNew>

            <wsdl:EndpointGroupSearch>

                 <wsdl:ContainerHandle>ADSOrgUnit=Groups,EndPoint=MyADEndpoint,Namespace=ActiveDirectory,Domain=im,Server=Server</wsdl:ContainerHandle>

            </wsdl:EndpointGroupSearch>

         </wsdl:CreateActiveDirectoryGroupSearch>     

         <wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>

            <wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>TestGroup</wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>

            <wsdl:ntAccountId>TestGroup</wsdl:ntAccountId>

            <wsdl:ADSdescription>Test Group</wsdl:ADSdescription>

            <wsdl:EMail>[email protected]</wsdl:EMail>

            <wsdl:groupScopeInternal>Global</wsdl:groupScopeInternal>

            <wsdl:groupTypeInternal>Security</wsdl:groupTypeInternal>

            <wsdl:info>TestGroup</wsdl:info>

         </wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>            

      </wsdl:CreateActiveDirectoryGroup>

   </soapenv:Body>

</soapenv:Envelope>