37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * Copyright (c) 2014 ForgeRock AS. All rights reserved.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * The contents of this file are subject to the terms
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * of the Common Development and Distribution License
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * (the License). You may not use this file except in
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * compliance with the License.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * You can obtain a copy of the License at
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * See the License for the specific language governing
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * permission and limitations under the License.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * When distributing Covered Code, include this CDDL
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * Header Notice in each file and include the License file
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * at http://forgerock.org/license/CDDLv1.0.html
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * If applicable, add the following below the CDDL Header,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * with the fields enclosed by brackets [] replaced by
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * your own identifying information:
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos * "Portions Copyrighted [year] [name of copyright owner]"
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordossciptedazure Sample - Groovy Connector to Azure AD Graph API
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos-------------------
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo HordosThis sample demonstrates how to use Groovy to connect to AD Graph API. This sample enables the basic create,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordosread, update, and delete (CRUD) operations for groups and users. This sample requires a fresh install of OpenIDM.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo HordosConfigure under the configurationProperties section of provisioner.openicf-scriptedazure.json these two properties:
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "customConfiguration": "graphServiceUrl = 'https://graph.windows.net/__configureme__'; oauth2 { authority = 'https://login.windows.net/__configureme__'; redirectURI = '__configureme__'; resourceURI = 'https://graph.windows.net'}",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "customSensitiveConfiguration": "oauth2 { clientId = '__configureme__'; clientSecret = '__configureme__'; username = '__configureme__'; password = '__configureme__'}",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "customConfiguration": "graphServiceUrl = 'https://graph.windows.net/contoso.onmicrosoft.com_'; oauth2 { authority = 'https://login.windows.net/contoso.onmicrosoft.com'; redirectURI = 'https://localhost:8443/admin/index.html#azureCallback'; resourceURI = 'https://graph.windows.net'}",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "customSensitiveConfiguration": "oauth2 { clientId = 'b62c0f3f-f045-4e8e-a437-ab347420636e'; clientSecret = 'oiaRdRJm+rRzkjkccSOoRYFA0xwdV9sH+IZykBLhdtE='; username = 'admin@contoso.onmicrosoft.com'; password = 'Passw0rd'}",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos Alternative option to use the Refresh Token. It requires some change in the CustomizerScript.groovy
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos Step#1 (Get Authorization code): Visit page https://login.windows.net/<__configureme__>/oauth2/authorize?api-version=1.0&response_type=code&client_id=<__configureme__>&redirect_uri=<__configureme__>
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --data-urlencode 'grant_type=authorization_code'\
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --data-urlencode 'client_id=<__configureme__>'\
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --data-urlencode 'client_secret=<__configureme__>'\
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --data-urlencode 'resource=https://graph.windows.net'\
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos 'https://login.windows.net/<__configureme__>/oauth2/token'
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos 1. Start OpenIDM with the configuration for sample scriptedazure.
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ /path/to/openidm/startup.sh -p samples/scriptedazure
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "_id": "fake placeholder value",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "mailEnabled": false,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "displayName": "Azure Test Group",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "mailNickname": "Test_Group",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "securityEnabled": "true",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "description": "Azure AD Test Group"
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/Group?_action=create
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "mailEnabled":false,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "__NAME__":"b62c0f3f-f045-4e8e-a437-ab347420636e",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "proxyAddresses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "securityEnabled":true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisioningErrors":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "_id": "fake placeholder value",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "accountEnabled": true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "displayName": "Alex Wu",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "mailNickname": "AlexW",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "passwordProfile": { "password" : "Test1234", "forceChangePasswordNextLogin": false },
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "userPrincipalName": "Alex@contoso.onmicrosoft.com"
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/User?_action=create
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedLicenses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisionedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "accountEnabled":true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "__NAME__":"77d80814-55e0-4559-b956-985b744aa30f",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "proxyAddresses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "otherMails":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "userPrincipalName":"Alex@contoso.onmicrosoft.com",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisioningErrors":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "telephoneNumber" : "555-1234"
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/User/77d80814-55e0-4559-b956-985b744aa30f
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedLicenses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisionedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "accountEnabled":true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "__NAME__":"77d80814-55e0-4559-b956-985b744aa30f",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "proxyAddresses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "otherMails":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "userPrincipalName":"Alex@contoso.onmicrosoft.com",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisioningErrors":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/User/77d80814-55e0-4559-b956-985b744aa30f
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedLicenses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisionedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "accountEnabled":true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "__NAME__":"77d80814-55e0-4559-b956-985b744aa30f",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "proxyAddresses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "otherMails":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "assignedPlans":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "userPrincipalName":"Alex@contoso.onmicrosoft.com",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisioningErrors":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/Group/b62c0f3f-f045-4e8e-a437-ab347420636e
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "mailEnabled":false,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "__NAME__":"b62c0f3f-f045-4e8e-a437-ab347420636e",
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "proxyAddresses":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "securityEnabled":true,
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos "provisioningErrors":[
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/User/77d80814-55e0-4559-b956-985b744aa30f
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos $ curl --header "Content-Type: application/json" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Username: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos --header "X-OpenIDM-Password: openidm-admin" \
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo Hordos http://localhost:8080/openidm/system/scriptedazure/Group/b62c0f3f-f045-4e8e-a437-ab347420636e
37314e141b6bbe540ce20aab2d651f82cc865a24Laszlo HordosThis shows the basic CRUD operations on users and groups using Groovy and the Azure AD Graph API. To read