Using the Authentication Manager SDK to search for users or groups in All Identity Sources
4 years ago
Originally Published: 2021-04-16
Article Number
000044380
Applies To
RSA Product Set: RSA SecurID
RSA Product/Service Type: Authentication Manager SDK
RSA Version/Condition: 8.x
Issue
  •  RSA Authentication Manager SDK Documentation states that the special GUID Global.ALL_IDENTITY_SOURCES_ID may be specified within the SearchPrincipalsCommand, to search all identity sources instead of specifying the GUID of one identity source.
  • The special GUID Global.ALL_IDENTITY_SOURCES_ID will work if there is Java, but for other coding languages, this value does not exist.

 
Resolution
As a workaround, the customer can use the GUID value of ims.0000-ID-Source-All-0000 to state that this is referring to all identity sources in the system. 

As an example, when connecting to the WSDL of the RSA Authentication Manager:
 
$SystemFilter = New-Object mjb.Filter
$SystemFilter.comp = New-Object mjb.Empty

$SearchPrincipalsCommand = New-Object mjb.SearchPrincipalsCommand
$SearchPrincipalsCommand.limit = 100
$SearchPrincipalsCommand.identitySourceGuid = 'ims.0000-ID-Source-All-0000'
$SearchPrincipalsCommand.securityDomainGuid = 'ims.000000000000000000001000e0011000'
$SearchPrincipalsCommand.systemFilter = $SystemFilter
$SearchPrincipalsCommand.searchSubDomains = $true

$SearchPrincipalsCommand = $CommandServer.executeCommand($loginCommand.sessionId, $SearchPrincipalsCommand)