There are instances where we need for info about Audit history on user, groups or apps in IDCS or if we want to automate something in IDCS(for eg. user maintenance)
The standard IDCS UI and reports have very limited capabilities and details, which doesn't provide us sufficient details if we want to debug for something.
Oracle provides us with IDCS rest API's which will be very helpful in these cases.
Now let us see how we can configure and use.
Pr-requisite- We need to have an Oauth confidential app created in IDCS which will help us call these Rest API's. We can refer THIS post to create Oauth app in IDCS.
Configuring POSTMAN :
Open the POSTMAN app:
Click on Collections-> Import
Paste the below Url:
The IDCS rest API collection will get imported as below:
Now we will Import Environment:
For this got to Environments->Import
Paste the below URL:
The Environment will get imported as below:
Now we will import Globals:
For this as well got to Environments->Import
Paste the below URL:
Now let us add the required values in the environment variables to make the rest API working:
HOST will be the IDCS host url like below:
https://idcs-3463764736344734983d.identity.oraclecloud.com/
Client ID and Secret will be of the OAuth App we created in previous step.
Username and Password it will be your IDCS username and password. This is optional and we can keep blank.
Rest all others we can keep blank.
Populate values int default and current both.
After entering the value Save it.
Select the environment as below:
Now we will obtain access token and call a sample rest IDCS API to get user list.
Go to Collections->REST_API_for_Oracle_Identity_Cloud_Service->OAuth->Tokens->Obtain access_token (client credentials)
Now Click on Send to obtain the token:
We will get the access token in response:
Select the token Value as shown below.(Value between the double quotes).
Keep the token selected , now right click->Set:Oracle Identity Cloud Service Example Environment with Variables->access_token
This will set the access_token value in environment as below:
Alternatively we can also copy and paste the token value to access_token environment variable's current value manually.
Now we are all set to call IDCS Rest apis from the collection.
Let us get list of users:
Click on send:
We will get the response like below:
Similarly we can use any other API from the collection based on our requirements.
This will be helpful in many cases for eg. To get the detailed logs which are not available in audit logs report that we get from IDCS UI.
We can get all reports and perform multiple activities without logging in to application.