Step 7: Configuring Just In Time Provisioning Attribute Mapping using Postman
Set the Environment Parameters in Postman
-
Open Postman, select Environments, and click Import.
-
On the Import screen, import the file OCI IAM Identity Domain.postman_environment.json. For the JSON file downloads, refer to the following Customer Support Portal article: https://iccp.custhelp.com/app/answers/answer_view/a_id/1016088.
-
In the imported environment, update the environment variables by entering the following values, and then click Save.
-
HOST: The Oracle IAM Domain URL.
-
CLIENT_ID and CLIENT_SECRET: The Client ID and the Client Secret from the confidential application.
-
Import the OCIM Federation Postman Collection
-
On the Postman main page, select Collection and click Import.
-
In the Import dialog box, import the file OCIM Federation.postman_collection.json. For the JSON file downloads, refer to the following Customer Support Portal article: https://iccp.custhelp.com/app/answers/answer_view/a_id/1016088.
Request an Access Token
-
On the Collections tab, expand OCIM Federation and select Obtain access_token (client credentials). Click Send.
The access token is returned in the response from Oracle Identity Domain.
-
Highlight the access token content between the quotation marks and then right-click.
-
In the shortcut menu, select Set: OCI IAM Identity Domain. In the secondary menu, select access_token. The highlighted content is assigned as the access token value.
Get the Identity Provider Name
-
Select Get the Identity Provider Name and click Send.
-
Note the partnerName in the response for the type: SAML. The partnerName should be the Identity Provider configured in Identity Domain.
Get the Identity Provider Id by passing the Identity Provider Name
-
Select Get the Identity Provider Id by passing the Identity Provider Name.
-
Replace partnerName in the URI with the partnerName from the 'Get the Identity Provider Name' section (see previous steps).
-
Click Send.
-
Note the jitUserProvAttributes.value.
Update the JIT Attribute Mapping
-
Select Update the JIT Attribute Mapping.
-
Replace the <jitUserProvAttributes.value> in the URL with the value from the ‘Get the Identity Provider Id by passing the Identity Provider Name’ section (see previous steps).
-
Click Send.
Note:
Status: 200 OK should be received in the response.
Confirm the JIT Mappings are Created
-
Go to the OCI Identity Domain console, navigate to Identity Provider, and select the provider.
-
Click Configure JIT and confirm the JIT mappings have been created.