Skip to content

Add sailpoint-app-setup command - #2246

Merged
amangalampalli-ks merged 4 commits into
add/sailpoint-app-setup-commandfrom
add/sailpoint-app-setup-command-int
Jul 30, 2026
Merged

Add sailpoint-app-setup command#2246
amangalampalli-ks merged 4 commits into
add/sailpoint-app-setup-commandfrom
add/sailpoint-app-setup-command-int

Conversation

@amangalampalli-ks

Copy link
Copy Markdown
Contributor

Summary

Adds SailPoint Service Mode setup and runtime support so SailPoint can invite users and apply entitlements safely through Commander, including deferred apply until users become Active and SCIM coexistence guards.

Changes

  • Added sailpoint-app-setup to create a dedicated SailPoint config record and regenerate Commander-only compose with COMMANDER_RECORD + SAILPOINT_RECORD
  • Queued role/team/share entitlements for invited users and applied them via a background poller after activation
  • Enforced a SailPoint command allowlist and blocked SCIM-managed identity changes while still allowing folder/record shares
  • Added unit coverage for parsing, allowlist sanitize, pending merge, SCIM detection, and record UID resolution

@amangalampalli-ks amangalampalli-ks self-assigned this Jul 28, 2026
@amangalampalli-ks
amangalampalli-ks marked this pull request as ready for review July 28, 2026 10:05
@amangalampalli-ks amangalampalli-ks changed the title Add/sailpoint app setup command int Add sailpoint-app-setup command Jul 28, 2026
Comment thread keepercommander/service/commands/integrations/sailpoint/apply_entitlements.py Outdated
Comment thread keepercommander/service/commands/integrations/sailpoint/command_parse.py Outdated
@amangalampalli-ks
amangalampalli-ks merged commit d271a15 into add/sailpoint-app-setup-command Jul 30, 2026
4 checks passed
amangalampalli-ks added a commit that referenced this pull request Jul 30, 2026
* Implement Sailpoint App Setup Command for sailpoint integration

* Add code enhancements and validations

* Improve SailPoint Service Mode: capability gates, better logs, remove Contributor from NSF, and safer pending apply.

* Fix sync down timeout
craiglurey pushed a commit that referenced this pull request Jul 30, 2026
* Implement Sailpoint App Setup Command for sailpoint integration

* Add code enhancements and validations

* Improve SailPoint Service Mode: capability gates, better logs, remove Contributor from NSF, and safer pending apply.

* Fix sync down timeout
sk-keeper pushed a commit that referenced this pull request Jul 30, 2026
* Implement Sailpoint App Setup Command for sailpoint integration

* Add code enhancements and validations

* Improve SailPoint Service Mode: capability gates, better logs, remove Contributor from NSF, and safer pending apply.

* Fix sync down timeout
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants