How to create an Active Directory group via Web Services in Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Endpoint groups may be managed via Identity Manager.  The following is a sample SOAP request showing how to create an Active Directory endpoint group via Web Services.

Environment

Release:
Component: IDMGR

Resolution

This sample SOAP request will create an Active Directory group.  It should be modified with environment specific details.  It can also be used as a sample to create groups on other endpoint types using the appropriate Create Group task for that endpoint type.

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsdl="http://tews6/wsdl">

   <soapenv:Header/>

   <soapenv:Body>

      <wsdl:TaskContext>

         <wsdl:admin_id>imadmin</wsdl:admin_id>

         <wsdl:admin_password>password</wsdl:admin_password>

      </wsdl:TaskContext>

      <wsdl:CreateActiveDirectoryGroup>

    <wsdl:CreateActiveDirectoryGroupSearch>

            <wsdl:CreateNew>TRUE</wsdl:CreateNew>

            <wsdl:EndpointGroupSearch>

                 <wsdl:ContainerHandle>ADSOrgUnit=Groups,EndPoint=MyADEndpoint,Namespace=ActiveDirectory,Domain=im,Server=Server</wsdl:ContainerHandle>

            </wsdl:EndpointGroupSearch>

         </wsdl:CreateActiveDirectoryGroupSearch>     

         <wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>

            <wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>TestGroup</wsdl:_PCT_ENDPOINT_CAPABILITY_NAME_PCT_>

            <wsdl:ntAccountId>TestGroup</wsdl:ntAccountId>

            <wsdl:ADSdescription>Test Group</wsdl:ADSdescription>

            <wsdl:EMail>[email protected]</wsdl:EMail>

            <wsdl:groupScopeInternal>Global</wsdl:groupScopeInternal>

            <wsdl:groupTypeInternal>Security</wsdl:groupTypeInternal>

            <wsdl:info>TestGroup</wsdl:info>

         </wsdl:CreateActiveDirectoryGroupActiveDirectoryGroupGroupTab>            

      </wsdl:CreateActiveDirectoryGroup>

   </soapenv:Body>

</soapenv:Envelope>