Component:
For IBM Security Verify Access Federation Offering: isva_10.0.0.0_20200601-2346
Connector Package: verify_access_connector_templates_20201030-0806.pkg
Date: 11/04/2020
Contents:
======
1.0 General description
2.0 Connector Package Highlights
3.0 Prerequisites
4.0 Image directory contents
5.0 Installation instructions
6.0 Additional installation information
7.0 Known problems and workarounds
8.0 Additional product information
1.0 General description
======
The connector package contains SAML2.0 quick connect templates for different SaaS providers. The idea is that a federation connector is constructed from a connector template, and the template contains preconfigured SAML2.0 SSO properties for the specific SaaS Provider, thus simplifying connector configuration. The connector package can be imported and used by ISVA9 federation and later.
2.0 Connector Package Highlights
======
1. New partner templates added in this Connector package build: Cloud CMS, Confluent Cloud, Gremlin-AutoProvisioning-Disabled, Gremlin-AutoProvisioning- Enabled, Reftab-AutoProvisioning-Disabled, Reftab-AutoProvisioning-Enabled, SparkPost, webMethodsAgileAppsCloud-AutoProvisioning-Disabled, webMethodsAgileAppsCloud- AutoProvisioning-Enabled, Zercurity
2. This connector package contains 462 connector templates corresponding to 425 partners + Generic template (listed below):
Partner ID Partner Name
1 Generic
2 Salesforce JIT Provisioning Enabled
3 Salesforce JIT Provisioning Disabled
4 Google Apps
5 Amazon Web Services
6 Box Auto-Provisioning Disabled
7 Box Auto-Provisioning Enabled
8 Clarizen
9 CloudPassage Auto-Provisioning Disabled
10 CloudPassage Auto-Provisioning Enabled
11 Dropbox
12 Adobe Document Cloud
13 IBM Connections
14 Intacct
15 JIRA
16 Mixpanel
17 PagerDuty Auto-Provisioning Disabled
18 PagerDuty Auto-Provisioning Enabled
19 Samanage
20 ServiceNow
21 Syncplicity
22 Zendesk
23 Zoho
24 Lucidchart Auto-Provisioning Disabled
25 Lucidchart Auto-Provisioning Enabled 26 Active Directory Federation Services (ADFS)
27 BambooHR
28 GitHub Enterprise
29 Citrix
30 InVision
32 Zscaler
33 Concur
34 Workday
36 Netsuite
37 New Relic
38 DocuSign
39 RemedyForce JIT Provisioning Disabled
40 RemedyForce JIT Provisioning Enabled
41 Microsoft 365
42 Egnyte
44 Greenhouse Software
45 SoftLayer
46 SuccessFactors
47 Adobe Creative Cloud
48 ProofHQ Auto-Provisioning Disabled
49 ProofHQ Auto-Provisioning Enabled
50 WordPress
51 Mozy
52 CrashPlan
53 IBM MaaS360
54 Slack
57 ClearSlide
58 WebEx
59 Soonr Workplace
61 Asana
62 LiquidPlanner 63 LogMeIn
64 Okta JIT Provisioning Disabled
65 Okta JIT Provisioning Enabled
66 SugarCRM
67 Namely
68 BIME
69 Agiloft
70 Huddle
71 SpringCM
72 Unifyle Auto-Provisioning Disabled
73 Unifyle Auto-Provisioning Enabled
75 kiteworks
76 IBM Cloud Security Enforcer
77 IBM Blueworks Live
78 Sharefile
79 Brightcove
80 Roambi Business
81 IBM Bluemix
82 IBM Kenexa Talent Suite
83 Desk.com
84 Zoura
85 StatusPage
86 Igloo Auto-Provisioning Disabled
87 Igloo Auto-Provisioning Enabled
88 Bitium
89 BlueJeans
90 Informatica Cloud
91 OpenDataSoft
92 Bonusly
93 eSignLive
94 Aha 95 VersionOne
96 Tableau
97 DeskPro
98 Lesson.ly
99 OpenDNS
100 TOPdesk
101 ANCILE uAlign
102 Datadog
103 Redbooth
104 Watchdox
105 Skilljar
106 HappyFox
107 Ustream
108 Litmos
109 SAP Netweaver
110 ArcGIS
111 KanbanTool
113 Small Improvements
114 UserVoice
115 Boomi AtmoSphere
116 Symantec Endpoint Manager
117 Fairsail JIT Provisioning Disabled
118 Fairsail JIT Provisioning Enabled
121 AnswerHub
122 Assembla
123 Adaptive Insights
125 AppDynamics
126 Inspired elearnig AutoProvisioning Disabled
127 Inspired elearnig AutoProvisioning Enabled
128 Domo
129 Deputy 131 Envoy
132 Aspera Files
133 ScreenSteps
134 Ceredian
135 Appian Auto-Provisioning Disabled
136 Appian Auto-Provisioning Enabled
137 Showpad JIT Provisioning Disabled
138 Showpad JIT Provisioning Enabled
139 ITRP
140 Teem
141 PlanMyleave
142 Freshdesk
143 Freshservice
144 Quandora
145 JFrog Artifactory
146 Mingle
147 Birst Auto-Provisioning Disabled
148 Birst Auto-Provisioning Enabled
149 Flatter Files Auto-Provisioning Disabled
150 Flatter Files Auto-Provisioning Enabled
151 Expensify
153 Hosted Graphite
154 Proxyclick
155 Klipfolio
156 Jitbit
157 Kintone
158 MangoApps
159 OpsGenie
160 Panorama9
161 VictorOps
162 ShiftPlanning 163 UserEcho
164 WeekDone
165 Convo
166 WhosOnLocation
167 Targetprocess
168 Lifesize
169 Wake Auto-Provisioning Disabled
170 Wake Auto-Provisioning Enabled
171 Replicon
172 PeopleHR
173 Kissflow
174 Cisco Meraki
175 Edubrite
176 Wrike Auto-Provisioning Disabled
177 Wrike Auto-Provisioning Enabled
178 Buildkite
179 Jenkins
180 Workboard
181 ClickTime
182 Dome9
183 Interact
184 EZOfficeInventory
185 Robin
186 Thousandeyes
187 iMeet Central
188 Hackerone
189 Base CRM
190 Zinc
192 Sumo Logic
193 Front
194 UNIFI 195 Promapp Auto-Provisioning Disabled
196 Promapp Auto-Provisioning Enabled
197 PurelyHR
198 ImageRelay
199 Docebo
200 Workfront Auto-Provisioning Disabled
201 Workfront Auto-Provisioning Enabled
203 Lokad
205 TalentLMS
206 HackerRank
207 RunMyProcess
208 Trello
209 Proto.io
210 Ping Identity
211 MyWebTimesheets
212 Lattice
213 Skeddly
214 ProjectToolBelt
215 Nmbrs
216 BoldChat
217 CanvasLMS
218 GaggleAMP
219 Hoshinplan
221 Appbot
223 Bugsnag
224 ParkMyCloud
225 CoderPad
226 Testable
227 Hightail
228 Shufflrr Auto-Provisioning Disabled
229 Shufflrr Auto-Provisioning Enabled 230 jFrog Bintray
231 Recognize
232 BitGlass
233 Velpic-JITProvisioning-disabled
234 Velpic-JITProvisioning-enabled
235 ezeep
236 Feedly
237 IdeaScale
238 Honey
239 OneDesk-JITProvisioning-disabled
240 OneDesk-JITProvisioning-enabled
241 ProdPad
242 SignalFX
243 CloudAMQP
244 Filesanywhere
245 Loggly
246 Logit.io
248 EZRentOut
249 Questetra
250 FogBugz
251 Orgino
252 15Five
253 Zoom
254 Glasscubes
255 CMPUTE
256 CloudApp
257 HelpScout
258 MarketLogic
259 ServiceNow AutoProvisioning Enabled
260 &frankly
261 Knack Auto-Provisioning Disabled 262 Knack Auto-Provisioning Enabled
263 OneLogin
264 Zscaler Admin
265 Thomsons Online Benefits
266 SproutVideo
267 Mural
268 CircleHD Auto-provisioning Disabled
269 CircleHD Auto-provisioning Enabled
271 JobScore Auto-Provisioning Disabled
272 JobScore Auto-Provisioning Enabled
273 Illumio
274 Mode
275 Apteligent
276 Keeper
277 CrossKnowledge Auto-provisioning Disabled
278 CrossKnowledge Auto-provisioning Enabled
279 Kudos
280 Cronitor
281 StatusDashboard
282 StatusDashboard Admin
283 SecretServer
284 Humanity
287 Coggle
288 Kanbanize
289 Anypoint Platform Mulesoft
290 MindTouch
291 ITGlue
296 Tinfoil Security
297 SmarterU
298 Kapost
299 KnowledgeOwl 300 CakeHR
301 LiveChat
302 Rollbar
304 SnapEngage
305 Workplace
306 SauceLabs
307 LaunchDarkly
308 OnDMarc
309 Slemma
310 JAMF
286 KnowBe4
292 Evident.io
311 BrandFolder
312 MindTickle
313 Spotinst
314 TestFairy
315 Droplr
316 Nextravel
317 Adobe Captivate Prime
318 Branch
319 RealtimeBoard
320 Receptive
322 Ekarda Auto-Provisioning Disabled
323 Ekarda Auto-Provisioning Enabled
324 Kentik
326 Favro
327 Sentry
330 Qubole
332 Runscope
333 Atlassian
335 Helix Team Hub 336 Nuclino
337 Split
338 Ubersmith
341 Retrace
342 Samepage
343 Monday.com
344 CA Identity Service
345 Webex Teams
346 Matomo JIT Provisioning Disabled
347 Matomo JIT Provisioning Enabled
348 Peakon
349 Supermood
352 Fastly
353 Yodeck
354 Blissbook
355 Clever
356 Cloudability
357 Duo Security
358 TextExpander Auto-Provisioning Disabled
359 TextExpander Auto-Provisioning Enabled
360 Visual Paradigm
361 Manuscript
362 Ziflow
363 Accredible
364 Built.io
366 Way We Do
367 Slido
368 SalesLoft
369 AlertOps
371 GetGuru
372 Honeybadger 374 StatusHub
375 DigiCert
376 talkspirit
377 Trumba
378 4me
379 Druva Cloud Platform
380 Druva inSync
384 Elements.cloud
385 ProcessPlan
388 frevvo
390 Workteam
391 dmarcian
392 Spoke
393 LogDNA
394 Vtiger
395 Webex Meetings
396 Nexonia
397 SendSafely
398 Helpmonks
399 FOSSA
400 StoriesOnBoard
401 Skyprep
402 SignalSciences
403 Fivetran
405 TestingBot
406 Quip
408 Automox
410 Pipedrive
411 Password Manager Pro
412 Formstack
415 Pigeonhole Live 417 Postman
418 Cisco Umbrella
419 Teamphoria
420 TimeLive
421 Clubhouse
422 MyWorkDrive
423 Planview Leankit
424 Helpjuice
425 Podbean
426 SkyDesk
427 GoodData
428 SaaSLicense
429 getAbstract
430 10,000ft
432 WhenIWork JIT Provisioning Disabled
433 TextMagic
434 IronWifi
435 HelloSign
436 ResourceGuru
437 WhenIWork JIT Provisioning Enabled
438 ExpirationReminder
439 Mojo Helpdesk
440 PacificTimesheet
441 Platform9
442 Workpath
444 Visitly
446 OutReach
447 OneCloud
448 xMatters
449 OpenText Core
450 reamaze 451 IDrive
452 Twilio Flex
453 IBM QRadar
454 IBM Resilient
455 CyberArk
457 Wdesk
462 Wandera
466 IBMid
467 IBM Cloud Private
469 Contentful
471 HelpDocs
472 Blocks Edit
473 productboard
474 BasicOps
475 Elium
476 ExpenseIn
479 Harness
481 Mapbox
482 Phrase
484 Upsales
485 BlogIn
486 iObeya
487 Kolide
488 Sigma Computing
489 Squadcast
490 Upshotly
491 Chargebee
496 iSpring Learn
497 Firstbird
498 Statusbrew
500 GitLab 501 GitBook
502 miniOrange
504 Ally.io
507 Blink
508 Breezy HR
509 Deskradar
510 Bitabiz
512 BugCrowd
513 Comm100
516 Declaree-AutoProvisioning-Disabled
519 HubSpot
520 Chorus
521 Glassfrog
522 Declaree-AutoProvisioning-Enabled
524 Documo
525 Lightstep
527 BrowserStack
528 Skedda
529 Wootric
532 Uptime
533 Bugsee
534 SKYSITE
535 Uptrends
536 Red Hat Ansible Tower
537 *SparkPost
538 *Cloud CMS
539 *Zercurity
540 *Reftab AutoProvisioning Disabled
541 *Reftab AutoProvisioning Enabled
543 *webMethods AgileApps Cloud AutoProvisioning Enabled
544 *Confluent Cloud 546 *webMethods AgileApps Cloud AutoProvisioning Disabled
547 *Gremlin AutoProvisioning Disabled
548 *Gremlin AutoProvisioning Enabled
* Newly added templates
3.0 Prerequisites
======
This connector package can be imported on Federation of ISVA 9.0 and above appliances.
4.0 Image directory contents
======
4.1 Unzip verify_access_connector_templates_.zip file. It will contain verify_access_connector_templates_.pkg.
4.2 verify_access_connector_templates_.pkg
------
- guixml directory
- connectors
- java
- com
- ibm
- isva
- common
- utils - This directory contains all connector guixml templates
- javascripts
- com
- ibm
- isva
- templates - This directory contains all guixml javascripts templates
- instructions directory - This directory contains instructions XML templates in all locales - json directory - Contains all json templates
- build.txt - This file contains build number
- guixml.mappings - This file contains mapping of partner and corresponding javascript file
- template_pkg.properties - This file contains the federation partner template properties.
5.0 Installation instructions
======
This connector package can be imported ISVA 9 or above appliance.
Following are the two ways to import connector package:
5.1 Import connector package through Local Management Interface
------
1. Log in to the local management interface.
2. From the top menu, select Secure Federation -> Partner Templates.
3. On Federation Partner Templates, click import.
4. On Import Partner Templates popup, click Browse to select connector template package file ( .pkg). Click Import to import connector package.
5.2 Import connector package through REST API
------
1. Copy Connector package on ISVA appliance VM.
2. Execute below curl command to deploy connector package.
curl -ki -u admin:admin -X POST -H "Accept:application/json" -H "ContentType:multipart/form- data" https://
Note: Importing connector package does not take care of deleting existing connectors and connector related templates though the connector template is not present in that CT package. As this CT package does not have CSE connector and CIS environment already has CSE connector, you have to manually remove all CSE related connector templates using PostgreSQL commands. For deleting existing connector templates please refer section 8.4
6.0 Additional installation information
======
6.1 Verifying the update through Local Management Interface
------
1. Log in to the local management interface.
2. From the top menu, select Secure Federation -> Partner Templates.
3. Verify that following package name is getting displayed:
verify_access_connector_templates_20201030-0806
6.2 Verifying the update through REST API
------
1. Execute below curl command to deploy connector package.
curl -ki -u admin:admin -X POST -H "Accept:application/json" -H "ContentType:multipart/form- data" https://
2. Verify that following package name is getting displayed:
verify_access_connector_templates_20201030-0806
7.0 Known problems and workarounds
======
1. While applying the connector package on ISVA offering, following error may occur:
System Error
DPWAP0058E The command, 'mesa_config', did not complete within the allotted time.
Workarounds :
- Wait for some time and verify if the connector package is updated.
- If package is still not updated, restart the appliance.
2. IBM MaaS360 does not accepts Identity Provider entity ID with hypen(-) in it. This issue is being fixed by IBM MaaS360 support team. Workaround: Contact IBM MaaS360 support team to set the required entity ID from back end.
8.0 Additional product information
======
8.1 REST API to verify the expected connector GUIXML templates
------
curl -ki -u admin:admin -X GET -H "Content-Type: application/json" -H "Accept: application/json" https://
8.2 REST API to verify the expected JSON templates
------
curl -k -u admin:admin https://
8.3 REST API to verify the expected instructions XML templates
------
curl -ki -u admin:admin -H "Accept:application/xml" -H "Accept-Language:en" --user admin:admin -X GET https://
8.4 Delete existing connector templates from the database
------
Note:
1. REST APIs can not be used for deleting the connector templates. Hence you need to explicitly delete these templates from database.
2. To delete existing connector templates from database, you need administrator access of your ISVA appliance.
3. When connector template is deleted corresponding connector will also be deleted.
Following is the SQL command to connect the PostgreSQL database: /usr/bin/psql -U www-data -p 2020 config
Following are the SQL commands to delete connector templates from the PostgreSQL database:
1. For deleting the GUIXML template:
delete from isva_conn_guixml where template=;
For Example:
delete from isva_conn_guixml where template=76
where, 76 is template ID for IBM Cloud Security Enforcer.
2. For deleting the Instructions XML template:
delete from isva_conn_instructions where template=;
3. For deleting the JSON template:
delete from isva_connector_templates where id=;
Note:
JSON properties are stored in multiple tables.
Generally when entry for JSON template is deleted from isva_connector_templates table, all the corresponding entries get deleted automatically from other tables.
To verify that these entries does not exist, use following commands:
select from isva_connector_ta where tempid=;
select from isva_connector_tp where tempid=;
select from isva_connectors where template=;
If entries exist in any of the above table corresponding to the deleted JSON template, please delete them explicitly.
Similarly, you can delete connector related entries from DB2 and Oracle database.