ProvisioningPlan

All Superinterfaces:: java.io.Serializable

public interface ProvisioningPlan
extends java.io.Serializable

Nested Class Summary

Nested Classes
Modifier and Type	Interface and Description
`static class`	`ProvisioningPlan.AccountRequest` Represents a request for one application account.
`static class`	`ProvisioningPlan.AttributeRequest` Represents an operation on a single account attribute.
`static class`	`ProvisioningPlan.Operation` Operation codes for attributes and permissions.

Field Summary

Fields
Modifier and Type	Field and Description
`static java.lang.String`	`ACCOUNT_GROUP_APPLICATION`
`static java.lang.String`	`ACCOUNT_GROUP_DESCRIPTION`
`static java.lang.String`	`ACCOUNT_GROUP_NAME`
`static java.lang.String`	`ACCOUNT_GROUP_NATIVE_IDENTITY`
`static java.lang.String`	`ACCOUNT_GROUP_OWNER`
`static java.lang.String`	`ACCOUNT_GROUP_REFERENCE_ATTRIBUTE`
`static java.lang.String`	`ACCOUNT_GROUP_SCOPE`
`static java.lang.String`	`APP_IDM` The name of a special AccountRequest application that represents the aggregate identity managed by a provisioning system.
`static java.lang.String`	`APP_IIQ` The name of a special AccountRequest application that represents the IdentityIQ identity.
`static java.lang.String`	`ARG_ADD_DATE` The date at which an add or set request is to occur, the "sunrise" date.
`static java.lang.String`	`ARG_ALLOW_SIMPLIFICATION`
`static java.lang.String`	`ARG_ASSIGNMENT` When added to the arguments and set to true, will indicate that the AttributeAssignment stored on the identity, which makes it sticky, should also be created or removed.
`static java.lang.String`	`ARG_ASSIGNMENT_NOTE` The role assignment note coming in with the attribute request.
`static java.lang.String`	`ARG_CHECK_POLICY` When used with ATT_PASSWORD, requests that policy checking be performed before setting.
`static java.lang.String`	`ARG_COMMENTS` The request comments coming in with the request.
`static java.lang.String`	`ARG_DESTINATION_IDENTITY` Argument for "links" request.
`static java.lang.String`	`ARG_FORCE_NEW_ACCOUNT` When logically true, this AccountRequest argument indicates that the user specifically requested to create an account.
`static java.lang.String`	`ARG_LINK_EDIT` When this is logically true, it means that the link attribute was manually edited.
`static java.lang.String`	`ARG_LOCK_TIMEOUT` Name of a plan argument that contains the timeout to be used when acquiring locks on the target Identity.
`static java.lang.String`	`ARG_PERMITTED_BY` Holds the name of the role which permits the role being requested in a permitted role request.
`static java.lang.String`	`ARG_PREVIOUS_VALUE` Optional AttributeRequest argument used to convey the previous values that were assigned.
`static java.lang.String`	`ARG_REMOVE_DATE` The date at which a Remove request is to occur, the "sunset" date.
`static java.lang.String`	`ARG_REQUESTER` Name of a plan argument holding the name of the identity that is considered to be the requester of the provisioning.
`static java.lang.String`	`ARG_REQUIRED`
`static java.lang.String`	`ARG_SECRET` When true indicates that the AttributeRequest value is secret.
`static java.lang.String`	`ARG_SOURCE` Name of a plan argument that contains the "source" type.
`static java.lang.String`	`ARG_SOURCE_ID` Name of a plan argument that contains the database id of an object associated with the source.
`static java.lang.String`	`ARG_SOURCE_IDENTITY` Argument for "links" request.
`static java.lang.String`	`ARG_SOURCE_NAME` Name of a plan argument that contains the database name of an object associated with the source.
`static java.lang.String`	`ARG_TYPE`
`static java.lang.String`	`ARG_TYPE_DATE`
`static java.lang.String`	`ASSIGNMENT_ID_NEW` A reserved name that can be set in an AttributeRequest's assignmentId to indicate that a new assignment is to be created.
`static java.lang.String`	`ATT_ATTRIBUTE_NAME`
`static java.lang.String`	`ATT_ATTRIBUTE_VALUE`
`static java.lang.String`	`ATT_CURRENT_PASSWORD` Special attribute used in the arguments map of a password AttributeRequest that holds the users current password.
`static java.lang.String`	`ATT_GENERATED` Used to notify email template
`static java.lang.String`	`ATT_IDM_ROLES` The name of the attribute in the APP_IDM account that represents the assigned roles.
`static java.lang.String`	`ATT_IIQ_ACTIVITY_CONFIG` The name of a special AttributeRequest within the IdentityIQ application to modify the ActivityConfig.
`static java.lang.String`	`ATT_IIQ_ARCHIVES` A pseudo attribute representing the IdentityArchive list which we display in the UI as "identity history".
`static java.lang.String`	`ATT_IIQ_ASSIGNED_ROLES` The name of a special AttributeRequest within the IdentityIQ application to modify the assigned role list.
`static java.lang.String`	`ATT_IIQ_AUTHORIZED_SCOPES` The name of a special AttributeRequest within the IdentityIQ application to modify the authorized scopes list.
`static java.lang.String`	`ATT_IIQ_CAPABILITIES` Attribute holding the capabilities list.
`static java.lang.String`	`ATT_IIQ_CAPABILITIES_NEW` Preferred camel case version of the capabilities attribute.
`static java.lang.String`	`ATT_IIQ_CONTROLLED_SCOPES` Attribute holding the controlled scopes.
`static java.lang.String`	`ATT_IIQ_CONTROLLED_SCOPES_NEW` Preferred camel case version of the authorizedScopes attribute.
`static java.lang.String`	`ATT_IIQ_CONTROLS_ASSIGNED_SCOPE` Attribute holding the flag indicating that the identity also controls the assigned scope.
`static java.lang.String`	`ATT_IIQ_DETECTED_ROLES` The name of a special AttributeRequest within the IdentityIQ application to modify the detected role list.
`static java.lang.String`	`ATT_IIQ_EVENTS` A pseudo attribute representing Request objects associated with this identity which the UI displays as "identity events".
`static java.lang.String`	`ATT_IIQ_LINKS` The name of special AttributeRequest within the IdentityIQ application to move or delete links
`static java.lang.String`	`ATT_IIQ_PASSWORD` Deprecated. use `ATT_PASSWORD`
`static java.lang.String`	`ATT_IIQ_PROVISIONING_REQUESTS` An IdentityIQ pseudo attribute targeting the list of ProvisioningRequests.
`static java.lang.String`	`ATT_IIQ_ROLE_CHILD` Request to remove a child role from a role in a role composition certification.
`static java.lang.String`	`ATT_IIQ_ROLE_GRANTED_CAPABILITY` Request to remove a capability grant from a role.
`static java.lang.String`	`ATT_IIQ_ROLE_GRANTED_SCOPE` Request to remove a scope grant from a role.
`static java.lang.String`	`ATT_IIQ_ROLE_PERMIT` Request to remove a permitted role from a role in a role composition certification.
`static java.lang.String`	`ATT_IIQ_ROLE_PROFILES` Request to remove a profile from a role in a role composition certification.
`static java.lang.String`	`ATT_IIQ_ROLE_REQUIREMENT` Request to remove a required role from a role in a role composition certification.
`static java.lang.String`	`ATT_IIQ_SCOPE` Attribute holding the assigned scope.
`static java.lang.String`	`ATT_IIQ_SNAPSHOTS` An IdentityIQ pseudo attribute targeting the list of IdentitySnapshots.
`static java.lang.String`	`ATT_IIQ_WORKGROUPS` The name of a special AttributeRequest within the IdentityIQ application to modify the workgroup list.
`static java.lang.String`	`ATT_OBJECT_APPLICATION`
`static java.lang.String`	`ATT_OBJECT_ARGUMENTS`
`static java.lang.String`	`ATT_OBJECT_ATTRIBUTES`
`static java.lang.String`	`ATT_OBJECT_ID`
`static java.lang.String`	`ATT_OBJECT_INSTANCE`
`static java.lang.String`	`ATT_OBJECT_PERMISSIONS`
`static java.lang.String`	`ATT_OBJECT_TYPE`
`static java.lang.String`	`ATT_OBJECT_UUID`
`static java.lang.String`	`ATT_OP`
`static java.lang.String`	`ATT_PASSWORD` Special attribute name used in AttributeRequests to set an Identity or account's password.
`static java.lang.String`	`ATT_PERMISSION_RIGHTS`
`static java.lang.String`	`ATT_PERMISSION_TARGET`
`static java.lang.String`	`ATT_PLAN_ACCOUNTS`
`static java.lang.String`	`ATT_PLAN_ARGUMENTS`
`static java.lang.String`	`ATT_PLAN_IDENTITY`
`static java.lang.String`	`ATT_PLAN_INTEGRATION_DATA`
`static java.lang.String`	`ATT_PLAN_OBJECTS`
`static java.lang.String`	`ATT_PLAN_PROFILE_ORINDAL`
`static java.lang.String`	`ATT_PLAN_REQUESTERS`
`static java.lang.String`	`ATT_PRE_EXPIRE` Special attribute used in the arguments map of a password AttributeRequest that indicates that the new password should be pre-expired (for example - the user has to change it after first login).
`static java.lang.String`	`ATT_REQUEST_ARGUMENTS`
`static java.lang.String`	`ATT_REQUEST_RESULT`
`static java.lang.String`	`IIQ_APPLICATION_NAME` This is the name of the application "IIQ" that goes out in email.
`static java.lang.String`	`OBJECT_TYPE_GROUP` A type name used in ObjectRequest to indicate that the request will create or update a group.
`static java.lang.String`	`OBJECT_TYPE_MANAGED_ATTRIBUTE` A type name used in ObjectRequest to indicate that the request will create or update an IdentityIQ ManagedAttribute object but will not provisioning anything through a Connector.
`static java.lang.String[]`	`SECRET_ATTRIBUTES` List of secret things in provisioning plans.

Method Summary

All Methods Static Methods Instance Methods Abstract Methods Default Methods Deprecated Methods
Modifier and Type	Method and Description
`void`	`add(ObjectRequest object)`
`void`	`add(ProvisioningPlan.AccountRequest account)`
`void`	`add(java.lang.String appname, java.lang.String attname, java.lang.Object value)` Deprecated.
`ProvisioningPlan.AccountRequest`	`add(java.lang.String appname, java.lang.String identity, ProvisioningPlan.AccountRequest.Operation op)`
`void`	`add(java.lang.String appname, java.lang.String attname, ProvisioningPlan.Operation op, java.lang.Object value)` Deprecated.
`ProvisioningPlan.AccountRequest`	`add(java.lang.String appname, java.lang.String nativeIdentity, java.lang.String attname, ProvisioningPlan.Operation op, java.lang.Object value)`
`void`	`addObjectRequest(ObjectRequest request)`
`void`	`addRequest(AbstractRequest req)`
`void`	`addRequester(Identity requester)`
`static java.lang.Object`	`addValues(java.lang.Object something, java.lang.Object toSomething)` Backward compatibility for the Original signature before case insensitivity was added.
`static java.lang.Object`	`addValues(java.lang.Object something, java.lang.Object toSomething, boolean nocase)` Utility to add values to a multi-valued attribute with necessary coercion.
`ProvisioningPlan`	`collapse(boolean includeNullSet)`
`static boolean`	`contains(java.util.List list, java.lang.Object value, boolean nocase)`
`java.util.Collection<EntitlementSnapshot>`	`convertToEntitlementSnapshots()`
`static boolean`	`equals(java.lang.Object o1, java.lang.Object o2, boolean nocase)`
`void`	`fromMap(java.util.Map map)`
`java.lang.Object`	`get(java.lang.String name)`
`ProvisioningPlan.AccountRequest`	`getAccountRequest(java.lang.String appname)` Deprecated.
`ProvisioningPlan.AccountRequest`	`getAccountRequest(java.lang.String appname, java.lang.String instance, java.lang.String nativeIdentity)`
`java.util.List<ProvisioningPlan.AccountRequest>`	`getAccountRequests()`
`java.util.List<ProvisioningPlan.AccountRequest>`	`getAccountRequests(java.lang.String appname)`
`java.util.List<AbstractRequest>`	`getAllRequests()`
`static java.lang.String`	`getApplicationDisplayName(java.lang.String appName)` If appname is `APP_IIQ` we change it to `IIQ_APPLICATION_NAME`
`java.util.List<java.lang.String>`	`getApplicationNames()`
`java.util.List<Application>`	`getApplications(Resolver resolver)`
`<any>`	`getArguments()`
`java.lang.String`	`getComments()`
`Identity`	`getIdentity()`
`ProvisioningPlan.AccountRequest`	`getIDMAccountRequest()`
`ProvisioningPlan.AccountRequest`	`getIIQAccountRequest()`
`<any>`	`getIntegrationData()`
`static ProvisioningPlan`	`getLoggingPlan(ProvisioningPlan src)` Clone a plan removing passwords and other secret data.
`ProvisioningPlan.AccountRequest`	`getMatchingAccountRequest(ProvisioningPlan.AccountRequest src)`
`AbstractRequest`	`getMatchingRequest(AbstractRequest src)`
`AbstractRequest`	`getMatchingRequest(AbstractRequest src, boolean allowGeneratedId)`
`<T extends AbstractRequest> AbstractRequest`	`getMatchingRequest(java.util.List<T> requests, AbstractRequest src)`
`<T extends AbstractRequest> AbstractRequest`	`getMatchingRequest(java.util.List<T> requests, AbstractRequest src, boolean allowGeneratedId)`
`java.util.List<ProvisioningPlan.AccountRequest>`	`getModifyAccountRequests()`
`java.lang.String`	`getNativeIdentity()`
`java.util.List<ProvisioningPlan.AccountRequest>`	`getNonModifyAccountRequests()`
`java.lang.String`	`getNormalizedStatus()`
`ObjectRequest`	`getObjectRequest(java.lang.String appName, java.lang.String instance, java.lang.String nativeIdentity)`
`java.util.List<ObjectRequest>`	`getObjectRequests()`
`java.util.List<ProvisioningTarget>`	`getProvisioningTargets()`
`java.util.List<Identity>`	`getRequesters()`
`ProvisioningResult`	`getResult()`
`java.lang.String`	`getSource()`
`java.lang.String`	`getSourceId()`
`java.lang.String`	`getSourceName()`
`java.lang.String`	`getSourceType()`
`java.lang.String`	`getString(java.lang.String name)`
`java.lang.String`	`getTargetIntegration()`
`java.lang.String`	`getTrackingId()`
`java.util.List<Message>`	`getXmlErrors()` Deprecated.
`java.lang.String`	`getXmlRequestID()` Deprecated.
`java.lang.String`	`getXmlSourceId()` Deprecated.
`java.lang.String`	`getXmlSourceName()` Deprecated.
`java.lang.String`	`getXmlSourceType()` Deprecated.
`java.lang.String`	`getXmlStatus()` Deprecated.
`java.util.List<Message>`	`getXmlWarnings()` Deprecated.
`boolean`	`hasBeenExecuted()`
`boolean`	`hasRequests()`
`boolean`	`isEmpty()`
`boolean`	`isFullyCommitted()`
`boolean`	`isIdentityPlan()`
`boolean`	`isIIQ()`
`static boolean`	`isIIQ(java.lang.String app)` Return true if the given application name is the IdentityIQ application, either the Certification "IdentityIQ" name or the ProvisioningPlan "IIQ" name.
`static boolean`	`isSecret(java.lang.String name)`
`boolean`	`needsRetry()`
`void`	`put(java.lang.String name, java.lang.Object value)`
`static void`	`remove(java.util.List list, java.lang.Object value, boolean nocase)`
`void`	`remove(ProvisioningPlan.AccountRequest account)`
`void`	`remove(java.lang.String appname, java.lang.String attname, java.lang.Object value)` Deprecated.
`static void`	`removeAll(java.util.List list, java.util.List values, boolean nocase)`
`static java.lang.Object`	`removeValues(java.lang.Object something, java.lang.Object fromSomething)` Backward compatibility for the Original signature before case insensitivity was added.
`static java.lang.Object`	`removeValues(java.lang.Object something, java.lang.Object fromSomething, boolean nocase)` Utility to remove values from a multi-valued attribute.
`static void`	`retainAll(java.util.List list, java.util.List values, boolean nocase)`
`static java.lang.Object`	`retainValues(java.lang.Object something, java.lang.Object fromSomething, boolean nocase)` Utility to remove values from a multi-valued attribute that are not in a list.
`void`	`set(java.lang.String appname, java.lang.String attname, java.lang.Object value)` Deprecated.
`void`	`setAccountRequests(java.util.List<ProvisioningPlan.AccountRequest> reqs)`
`void`	`setObjectRequests(java.util.List<ObjectRequest> reqs)`
`java.util.Map`	`toMap()`

- Field Detail
  - ARG_REQUESTER
```
static final java.lang.String ARG_REQUESTER
```
    Name of a plan argument holding the name of the identity that is considered to be the requester of the provisioning. This is intended as an replacement for the _requesters property that is easier to pass through the machinery in maps.
    
    See Also:
    
    Constant Field Values
  - ARG_SOURCE
```
static final java.lang.String ARG_SOURCE
```
    Name of a plan argument that contains the "source" type. The value should be one of the sailpoint.object.Source enumerations but it is allowed to be a custom source.
    
    See Also:
    
    Constant Field Values
  - ARG_SOURCE_ID
```
static final java.lang.String ARG_SOURCE_ID
```
    Name of a plan argument that contains the database id of an object associated with the source. This is used only for Certification and PolicyViolation sources.
    
    See Also:
    
    Constant Field Values
  - ARG_SOURCE_NAME
```
static final java.lang.String ARG_SOURCE_NAME
```
    Name of a plan argument that contains the database name of an object associated with the source. This is used only for Certification and PolicyViolation sources.
    
    See Also:
    
    Constant Field Values
  - ARG_LOCK_TIMEOUT
```
static final java.lang.String ARG_LOCK_TIMEOUT
```
    Name of a plan argument that contains the timeout to be used when acquiring locks on the target Identity. Also used when locking the source or destination identity when moving links. This is intended for use in plans that are being synchronously executed in a UI thread so you do not have to wait the default 1 minute for a lock timeout.
    
    See Also:
    
    Constant Field Values
  - APP_IIQ
```
static final java.lang.String APP_IIQ
```
    The name of a special AccountRequest application that represents the IdentityIQ identity.
    
    See Also:
    
    Constant Field Values
  - IIQ_APPLICATION_NAME
```
static final java.lang.String IIQ_APPLICATION_NAME
```
    This is the name of the application "IIQ" that goes out in email.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ASSIGNED_ROLES
```
static final java.lang.String ATT_IIQ_ASSIGNED_ROLES
```
    The name of a special AttributeRequest within the IdentityIQ application to modify the assigned role list.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_DETECTED_ROLES
```
static final java.lang.String ATT_IIQ_DETECTED_ROLES
```
    The name of a special AttributeRequest within the IdentityIQ application to modify the detected role list.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_LINKS
```
static final java.lang.String ATT_IIQ_LINKS
```
    The name of special AttributeRequest within the IdentityIQ application to move or delete links
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_WORKGROUPS
```
static final java.lang.String ATT_IIQ_WORKGROUPS
```
    The name of a special AttributeRequest within the IdentityIQ application to modify the workgroup list.
    
    See Also:
    
    Constant Field Values
  - ATT_PASSWORD
```
static final java.lang.String ATT_PASSWORD
```
    Special attribute name used in AttributeRequests to set an Identity or account's password.
  - ATT_CURRENT_PASSWORD
```
static final java.lang.String ATT_CURRENT_PASSWORD
```
    Special attribute used in the arguments map of a password AttributeRequest that holds the users current password. If not specified, the password will be "reset" rather than "changed".
  - ATT_PRE_EXPIRE
```
static final java.lang.String ATT_PRE_EXPIRE
```
    Special attribute used in the arguments map of a password AttributeRequest that indicates that the new password should be pre-expired (for example - the user has to change it after first login).
  - ATT_GENERATED
```
static final java.lang.String ATT_GENERATED
```
    Used to notify email template
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_PASSWORD
```
@Deprecated
static final java.lang.String ATT_IIQ_PASSWORD
```
    Deprecated. use ATT_PASSWORD
    
    Constant for the password attribute found in AttributeRequests for IdentityIQ.
  - ATT_IIQ_CAPABILITIES
```
static final java.lang.String ATT_IIQ_CAPABILITIES
```
    Attribute holding the capabilities list. Certification has one of these too.
  - ATT_IIQ_CAPABILITIES_NEW
```
static final java.lang.String ATT_IIQ_CAPABILITIES_NEW
```
    Preferred camel case version of the capabilities attribute. IIQEvaluator will accept either ATT_IIQ_CAPABILITIES or this attribute, but the IdentityMap will be using this name.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_CONTROLLED_SCOPES
```
static final java.lang.String ATT_IIQ_CONTROLLED_SCOPES
```
    Attribute holding the controlled scopes.
  - ATT_IIQ_CONTROLLED_SCOPES_NEW
```
static final java.lang.String ATT_IIQ_CONTROLLED_SCOPES_NEW
```
    Preferred camel case version of the authorizedScopes attribute. IIQEvaluator will accept either ATT_IIQ_CONTROLLED_SCOPES or this attribute, but the IdentityMap will be using this name.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_AUTHORIZED_SCOPES
```
static final java.lang.String ATT_IIQ_AUTHORIZED_SCOPES
```
    The name of a special AttributeRequest within the IdentityIQ application to modify the authorized scopes list.
  - ATT_IIQ_SCOPE
```
static final java.lang.String ATT_IIQ_SCOPE
```
    Attribute holding the assigned scope.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_CONTROLS_ASSIGNED_SCOPE
```
static final java.lang.String ATT_IIQ_CONTROLS_ASSIGNED_SCOPE
```
    Attribute holding the flag indicating that the identity also controls the assigned scope.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ACTIVITY_CONFIG
```
static final java.lang.String ATT_IIQ_ACTIVITY_CONFIG
```
    The name of a special AttributeRequest within the IdentityIQ application to modify the ActivityConfig. The value is normally a String or List of application ids. If the value is Boolean true/false it sets the "enableAll" flag.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ARCHIVES
```
static final java.lang.String ATT_IIQ_ARCHIVES
```
    A pseudo attribute representing the IdentityArchive list which we display in the UI as "identity history". You can only make Remove requests for this list, adding IdentityArchive objects is only done as a side effect of an identity refresh you cannot make one from a provisioning plan. The value must be a id or list of ids of IdentityArchive objects.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_SNAPSHOTS
```
static final java.lang.String ATT_IIQ_SNAPSHOTS
```
    An IdentityIQ pseudo attribute targeting the list of IdentitySnapshots.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_EVENTS
```
static final java.lang.String ATT_IIQ_EVENTS
```
    A pseudo attribute representing Request objects associated with this identity which the UI displays as "identity events". You can only make Remove requests for this list, adding Request objects is only done as a side effect of other things like role sunrise/sunset. You cannot make one from a plan. The value must be a id or list of ids of Request objects.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_PROVISIONING_REQUESTS
```
static final java.lang.String ATT_IIQ_PROVISIONING_REQUESTS
```
    An IdentityIQ pseudo attribute targeting the list of ProvisioningRequests.
    
    See Also:
    
    Constant Field Values
  - APP_IDM
```
static final java.lang.String APP_IDM
```
    The name of a special AccountRequest application that represents the aggregate identity managed by a provisioning system. This account may have additional attributes not represented in resource accounts, notably a list of provisioning system role assignments.
  - ATT_IDM_ROLES
```
static final java.lang.String ATT_IDM_ROLES
```
    The name of the attribute in the APP_IDM account that represents the assigned roles. The value must be a List.
  - ARG_FORCE_NEW_ACCOUNT
```
static final java.lang.String ARG_FORCE_NEW_ACCOUNT
```
    When logically true, this AccountRequest argument indicates that the user specifically requested to create an account.
    
    See Also:
    
    Constant Field Values
  - ARG_ADD_DATE
```
static final java.lang.String ARG_ADD_DATE
```
    The date at which an add or set request is to occur, the "sunrise" date.
    
    See Also:
    
    Constant Field Values
  - ARG_REMOVE_DATE
```
static final java.lang.String ARG_REMOVE_DATE
```
    The date at which a Remove request is to occur, the "sunset" date. This can be combined with addDate in a Set or Add request which is why it needs a different name.
    
    See Also:
    
    Constant Field Values
  - ARG_COMMENTS
```
static final java.lang.String ARG_COMMENTS
```
    The request comments coming in with the request. Need to be shown on the approval.
    
    See Also:
    
    Constant Field Values
  - ARG_ASSIGNMENT_NOTE
```
static final java.lang.String ARG_ASSIGNMENT_NOTE
```
    The role assignment note coming in with the attribute request.
    
    See Also:
    
    Constant Field Values
  - ARG_LINK_EDIT
```
static final java.lang.String ARG_LINK_EDIT
```
    When this is logically true, it means that the link attribute was manually edited. It should be stored in the link similar to the "optimistic provisioning" option, but it should NOT be sent to a provisioning system.
    
    See Also:
    
    Constant Field Values
  - ARG_CHECK_POLICY
```
static final java.lang.String ARG_CHECK_POLICY
```
    When used with ATT_PASSWORD, requests that policy checking be performed before setting.
    
    See Also:
    
    Constant Field Values
  - ARG_ASSIGNMENT
```
static final java.lang.String ARG_ASSIGNMENT
```
    When added to the arguments and set to true, will indicate that the AttributeAssignment stored on the identity, which makes it sticky, should also be created or removed.
    
    See Also:
    
    AttributeAssignment, Constant Field Values
  - ARG_SECRET
```
static final java.lang.String ARG_SECRET
```
    When true indicates that the AttributeRequest value is secret.
    
    See Also:
    
    Constant Field Values
  - ARG_PERMITTED_BY
```
static final java.lang.String ARG_PERMITTED_BY
```
    Holds the name of the role which permits the role being requested in a permitted role request.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_PROFILES
```
static final java.lang.String ATT_IIQ_ROLE_PROFILES
```
    Request to remove a profile from a role in a role composition certification.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_CHILD
```
static final java.lang.String ATT_IIQ_ROLE_CHILD
```
    Request to remove a child role from a role in a role composition certification.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_REQUIREMENT
```
static final java.lang.String ATT_IIQ_ROLE_REQUIREMENT
```
    Request to remove a required role from a role in a role composition certification.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_PERMIT
```
static final java.lang.String ATT_IIQ_ROLE_PERMIT
```
    Request to remove a permitted role from a role in a role composition certification.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_GRANTED_SCOPE
```
static final java.lang.String ATT_IIQ_ROLE_GRANTED_SCOPE
```
    Request to remove a scope grant from a role.
    
    See Also:
    
    Constant Field Values
  - ATT_IIQ_ROLE_GRANTED_CAPABILITY
```
static final java.lang.String ATT_IIQ_ROLE_GRANTED_CAPABILITY
```
    Request to remove a capability grant from a role.
    
    See Also:
    
    Constant Field Values
  - ARG_PREVIOUS_VALUE
```
static final java.lang.String ARG_PREVIOUS_VALUE
```
    Optional AttributeRequest argument used to convey the previous values that were assigned.
    
    See Also:
    
    Constant Field Values
  - ARG_TYPE
```
static final java.lang.String ARG_TYPE
```
    See Also:
    
    Constant Field Values
  - ARG_REQUIRED
```
static final java.lang.String ARG_REQUIRED
```
    See Also:
    
    Constant Field Values
  - ARG_TYPE_DATE
```
static final java.lang.String ARG_TYPE_DATE
```
    See Also:
    
    Constant Field Values
  - ARG_ALLOW_SIMPLIFICATION
```
static final java.lang.String ARG_ALLOW_SIMPLIFICATION
```
    See Also:
    
    Constant Field Values
  - ARG_DESTINATION_IDENTITY
```
static final java.lang.String ARG_DESTINATION_IDENTITY
```
    Argument for "links" request. To which identity the link should be moved to.
    
    See Also:
    
    Constant Field Values
  - ARG_SOURCE_IDENTITY
```
static final java.lang.String ARG_SOURCE_IDENTITY
```
    Argument for "links" request. From which identity the link should be moved.
    
    See Also:
    
    Constant Field Values
  - OBJECT_TYPE_MANAGED_ATTRIBUTE
```
static final java.lang.String OBJECT_TYPE_MANAGED_ATTRIBUTE
```
    A type name used in ObjectRequest to indicate that the request will create or update an IdentityIQ ManagedAttribute object but will not provisioning anything through a Connector. This is necessary to distinguish between ObjectRequests of type "group" that will provision groups, and ORs for other managed attributes.
    
    See Also:
    
    Constant Field Values
  - OBJECT_TYPE_GROUP
```
static final java.lang.String OBJECT_TYPE_GROUP
```
    A type name used in ObjectRequest to indicate that the request will create or update a group. Use of this constant is not required, any Schema name in the target Application will do, but this is common and consistent with OBJECT_type_MANAGED_ATTRIBUTE.
    
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_NAME
```
static final java.lang.String ACCOUNT_GROUP_NAME
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_DESCRIPTION
```
static final java.lang.String ACCOUNT_GROUP_DESCRIPTION
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_OWNER
```
static final java.lang.String ACCOUNT_GROUP_OWNER
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_SCOPE
```
static final java.lang.String ACCOUNT_GROUP_SCOPE
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_APPLICATION
```
static final java.lang.String ACCOUNT_GROUP_APPLICATION
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_NATIVE_IDENTITY
```
static final java.lang.String ACCOUNT_GROUP_NATIVE_IDENTITY
```
    See Also:
    
    Constant Field Values
  - ACCOUNT_GROUP_REFERENCE_ATTRIBUTE
```
static final java.lang.String ACCOUNT_GROUP_REFERENCE_ATTRIBUTE
```
    See Also:
    
    Constant Field Values
  - ATT_PLAN_IDENTITY
```
static final java.lang.String ATT_PLAN_IDENTITY
```
  - ATT_PLAN_ACCOUNTS
```
static final java.lang.String ATT_PLAN_ACCOUNTS
```
  - ATT_PLAN_OBJECTS
```
static final java.lang.String ATT_PLAN_OBJECTS
```
  - ATT_PLAN_REQUESTERS
```
static final java.lang.String ATT_PLAN_REQUESTERS
```
    See Also:
    
    Constant Field Values
  - ATT_PLAN_ARGUMENTS
```
static final java.lang.String ATT_PLAN_ARGUMENTS
```
  - ATT_PLAN_INTEGRATION_DATA
```
static final java.lang.String ATT_PLAN_INTEGRATION_DATA
```
  - ATT_PLAN_PROFILE_ORINDAL
```
static final java.lang.String ATT_PLAN_PROFILE_ORINDAL
```
    See Also:
    
    Constant Field Values
  - ATT_OP
```
static final java.lang.String ATT_OP
```
  - ATT_OBJECT_APPLICATION
```
static final java.lang.String ATT_OBJECT_APPLICATION
```
  - ATT_OBJECT_INSTANCE
```
static final java.lang.String ATT_OBJECT_INSTANCE
```
  - ATT_OBJECT_TYPE
```
static final java.lang.String ATT_OBJECT_TYPE
```
    See Also:
    
    Constant Field Values
  - ATT_OBJECT_ID
```
static final java.lang.String ATT_OBJECT_ID
```
  - ATT_OBJECT_UUID
```
static final java.lang.String ATT_OBJECT_UUID
```
    See Also:
    
    Constant Field Values
  - ATT_OBJECT_ATTRIBUTES
```
static final java.lang.String ATT_OBJECT_ATTRIBUTES
```
  - ATT_OBJECT_PERMISSIONS
```
static final java.lang.String ATT_OBJECT_PERMISSIONS
```
  - ATT_OBJECT_ARGUMENTS
```
static final java.lang.String ATT_OBJECT_ARGUMENTS
```
  - ATT_ATTRIBUTE_NAME
```
static final java.lang.String ATT_ATTRIBUTE_NAME
```
  - ATT_ATTRIBUTE_VALUE
```
static final java.lang.String ATT_ATTRIBUTE_VALUE
```
  - ATT_PERMISSION_TARGET
```
static final java.lang.String ATT_PERMISSION_TARGET
```
  - ATT_PERMISSION_RIGHTS
```
static final java.lang.String ATT_PERMISSION_RIGHTS
```
  - ATT_REQUEST_ARGUMENTS
```
static final java.lang.String ATT_REQUEST_ARGUMENTS
```
  - ATT_REQUEST_RESULT
```
static final java.lang.String ATT_REQUEST_RESULT
```
  - ASSIGNMENT_ID_NEW
```
static final java.lang.String ASSIGNMENT_ID_NEW
```
    A reserved name that can be set in an AttributeRequest's assignmentId to indicate that a new assignment is to be created. This is an alternative to having the application generate a uuid.
    
    See Also:
    
    Constant Field Values
  - SECRET_ATTRIBUTES
```
static final java.lang.String[] SECRET_ATTRIBUTES
```
    List of secret things in provisioning plans.
- Method Detail
  - isIIQ
```
static boolean isIIQ(java.lang.String app)
```
    Return true if the given application name is the IdentityIQ application, either the Certification "IdentityIQ" name or the ProvisioningPlan "IIQ" name.
  - getApplicationDisplayName
```
static java.lang.String getApplicationDisplayName(java.lang.String appName)
```
    If appname is APP_IIQ we change it to IIQ_APPLICATION_NAME
    
    Parameters:
    
    appName - the appname to display
    
    Returns:
    
    modified Appname
  - addValues
```
static java.lang.Object addValues(java.lang.Object something,
                                  java.lang.Object toSomething,
                                  boolean nocase)
```
    Utility to add values to a multi-valued attribute with necessary coercion. This is generic and could go in Util. Originally this would always coerce the target value to a List but this creates XML clutter during the simplify phase where most AttributeRequests are just for atomic values.
    When nocase is true, the values are case insensitive.
  - addValues
```
static java.lang.Object addValues(java.lang.Object something,
                                  java.lang.Object toSomething)
```
    Backward compatibility for the Original signature before case insensitivity was added.
  - removeValues
```
static java.lang.Object removeValues(java.lang.Object something,
                                     java.lang.Object fromSomething,
                                     boolean nocase)
```
    Utility to remove values from a multi-valued attribute. Like addValues, used by Provisioner during plan compilation and during plan application.
    When nocase is true, the values are case insensitive.
  - removeValues
```
static java.lang.Object removeValues(java.lang.Object something,
                                     java.lang.Object fromSomething)
```
    Backward compatibility for the Original signature before case insensitivity was added.
  - retainValues
```
static java.lang.Object retainValues(java.lang.Object something,
                                     java.lang.Object fromSomething,
                                     boolean nocase)
```
    Utility to remove values from a multi-valued attribute that are not in a list. When nocase is true, the values are case insensitive.
  - removeAll
```
static void removeAll(java.util.List list,
                      java.util.List values,
                      boolean nocase)
```
  - retainAll
```
static void retainAll(java.util.List list,
                      java.util.List values,
                      boolean nocase)
```
  - remove
```
static void remove(java.util.List list,
                   java.lang.Object value,
                   boolean nocase)
```
  - contains
```
static boolean contains(java.util.List list,
                        java.lang.Object value,
                        boolean nocase)
```
  - equals
```
static boolean equals(java.lang.Object o1,
                      java.lang.Object o2,
                      boolean nocase)
```
  - isSecret
```
static boolean isSecret(java.lang.String name)
```
  - getLoggingPlan
```
static ProvisioningPlan getLoggingPlan(ProvisioningPlan src)
```
    Clone a plan removing passwords and other secret data. This is intended for use when logging plans.
  - isIdentityPlan
```
boolean isIdentityPlan()
```
  - add
```
void add(ProvisioningPlan.AccountRequest account)
```
  - add
```
void add(ObjectRequest object)
```
  - remove
```
void remove(ProvisioningPlan.AccountRequest account)
```
  - addRequest
```
void addRequest(AbstractRequest req)
```
  - setAccountRequests
```
void setAccountRequests(java.util.List<ProvisioningPlan.AccountRequest> reqs)
```
  - getAccountRequests
```
java.util.List<ProvisioningPlan.AccountRequest> getAccountRequests()
```
  - getObjectRequests
```
java.util.List<ObjectRequest> getObjectRequests()
```
  - setObjectRequests
```
void setObjectRequests(java.util.List<ObjectRequest> reqs)
```
  - addObjectRequest
```
void addObjectRequest(ObjectRequest request)
```
  - getAllRequests
```
java.util.List<AbstractRequest> getAllRequests()
```
  - isEmpty
```
boolean isEmpty()
```
  - hasRequests
```
boolean hasRequests()
```
  - getRequesters
```
java.util.List<Identity> getRequesters()
```
  - addRequester
```
void addRequester(Identity requester)
```
  - getComments
```
java.lang.String getComments()
```
  - getProvisioningTargets
```
java.util.List<ProvisioningTarget> getProvisioningTargets()
```
  - getSource
```
java.lang.String getSource()
```
  - getSourceType
```
java.lang.String getSourceType()
```
  - getSourceName
```
java.lang.String getSourceName()
```
  - getSourceId
```
java.lang.String getSourceId()
```
  - getIdentity
```
Identity getIdentity()
```
  - getNativeIdentity
```
java.lang.String getNativeIdentity()
```
  - getArguments
```
<any> getArguments()
```
  - getIntegrationData
```
<any> getIntegrationData()
```
  - getTargetIntegration
```
java.lang.String getTargetIntegration()
```
  - getResult
```
ProvisioningResult getResult()
```
  - isIIQ
```
boolean isIIQ()
```
  - getTrackingId
```
java.lang.String getTrackingId()
```
  - getXmlSourceType
```
@Deprecated
java.lang.String getXmlSourceType()
```
    Deprecated.
  - getXmlSourceName
```
@Deprecated
java.lang.String getXmlSourceName()
```
    Deprecated.
  - getXmlSourceId
```
@Deprecated
java.lang.String getXmlSourceId()
```
    Deprecated.
  - getXmlStatus
```
@Deprecated
java.lang.String getXmlStatus()
```
    Deprecated.
  - getXmlRequestID
```
@Deprecated
java.lang.String getXmlRequestID()
```
    Deprecated.
  - getXmlWarnings
```
@Deprecated
java.util.List<Message> getXmlWarnings()
```
    Deprecated.
  - getXmlErrors
```
@Deprecated
java.util.List<Message> getXmlErrors()
```
    Deprecated.
  - add
```
ProvisioningPlan.AccountRequest add(java.lang.String appname,
                                    java.lang.String identity,
                                    ProvisioningPlan.AccountRequest.Operation op)
```
  - add
```
ProvisioningPlan.AccountRequest add(java.lang.String appname,
                                    java.lang.String nativeIdentity,
                                    java.lang.String attname,
                                    ProvisioningPlan.Operation op,
                                    java.lang.Object value)
```
  - put
```
void put(java.lang.String name,
         java.lang.Object value)
```
  - get
```
java.lang.Object get(java.lang.String name)
```
  - getString
```
java.lang.String getString(java.lang.String name)
```
  - getMatchingRequest
```
AbstractRequest getMatchingRequest(AbstractRequest src)
```
  - getMatchingRequest
```
AbstractRequest getMatchingRequest(AbstractRequest src,
                                   boolean allowGeneratedId)
```
  - getMatchingRequest
```
<T extends AbstractRequest> AbstractRequest getMatchingRequest(java.util.List<T> requests,
                                                               AbstractRequest src)
```
  - getMatchingRequest
```
<T extends AbstractRequest> AbstractRequest getMatchingRequest(java.util.List<T> requests,
                                                               AbstractRequest src,
                                                               boolean allowGeneratedId)
```
  - getMatchingAccountRequest
```
ProvisioningPlan.AccountRequest getMatchingAccountRequest(ProvisioningPlan.AccountRequest src)
```
  - getAccountRequests
```
java.util.List<ProvisioningPlan.AccountRequest> getAccountRequests(java.lang.String appname)
```
  - getAccountRequest
```
@Deprecated
ProvisioningPlan.AccountRequest getAccountRequest(java.lang.String appname)
```
    Deprecated.
  - getAccountRequest
```
ProvisioningPlan.AccountRequest getAccountRequest(java.lang.String appname,
                                                  java.lang.String instance,
                                                  java.lang.String nativeIdentity)
```
  - getObjectRequest
```
ObjectRequest getObjectRequest(java.lang.String appName,
                               java.lang.String instance,
                               java.lang.String nativeIdentity)
```
  - getIIQAccountRequest
```
ProvisioningPlan.AccountRequest getIIQAccountRequest()
```
  - getIDMAccountRequest
```
ProvisioningPlan.AccountRequest getIDMAccountRequest()
```
  - convertToEntitlementSnapshots
```
java.util.Collection<EntitlementSnapshot> convertToEntitlementSnapshots()
                                                                 throws GeneralException
```
    Throws:
    
    GeneralException
  - getApplicationNames
```
java.util.List<java.lang.String> getApplicationNames()
```
  - getApplications
```
java.util.List<Application> getApplications(Resolver resolver)
                                     throws GeneralException
```
    Throws:
    
    GeneralException
  - getNonModifyAccountRequests
```
java.util.List<ProvisioningPlan.AccountRequest> getNonModifyAccountRequests()
```
  - getModifyAccountRequests
```
java.util.List<ProvisioningPlan.AccountRequest> getModifyAccountRequests()
```
  - toMap
```
java.util.Map toMap()
```
  - fromMap
```
void fromMap(java.util.Map map)
```
  - collapse
```
ProvisioningPlan collapse(boolean includeNullSet)
```
  - isFullyCommitted
```
boolean isFullyCommitted()
```
  - getNormalizedStatus
```
java.lang.String getNormalizedStatus()
```
  - hasBeenExecuted
```
boolean hasBeenExecuted()
```
  - needsRetry
```
boolean needsRetry()
```
  - add
```
@Deprecated
void add(java.lang.String appname,
                     java.lang.String attname,
                     ProvisioningPlan.Operation op,
                     java.lang.Object value)
```
    Deprecated.
  - add
```
@Deprecated
void add(java.lang.String appname,
                     java.lang.String attname,
                     java.lang.Object value)
```
    Deprecated.
  - remove
```
@Deprecated
void remove(java.lang.String appname,
                        java.lang.String attname,
                        java.lang.Object value)
```
    Deprecated.
  - set
```
@Deprecated
void set(java.lang.String appname,
                     java.lang.String attname,
                     java.lang.Object value)
```
    Deprecated.

Interface ProvisioningPlan

Nested Class Summary

Field Summary

Method Summary

Field Detail

ARG_REQUESTER

ARG_SOURCE

ARG_SOURCE_ID

ARG_SOURCE_NAME

ARG_LOCK_TIMEOUT

APP_IIQ

IIQ_APPLICATION_NAME

ATT_IIQ_ASSIGNED_ROLES

ATT_IIQ_DETECTED_ROLES

ATT_IIQ_LINKS

ATT_IIQ_WORKGROUPS

ATT_PASSWORD

ATT_CURRENT_PASSWORD

ATT_PRE_EXPIRE

ATT_GENERATED

ATT_IIQ_PASSWORD

ATT_IIQ_CAPABILITIES

ATT_IIQ_CAPABILITIES_NEW

ATT_IIQ_CONTROLLED_SCOPES

ATT_IIQ_CONTROLLED_SCOPES_NEW

ATT_IIQ_AUTHORIZED_SCOPES

ATT_IIQ_SCOPE

ATT_IIQ_CONTROLS_ASSIGNED_SCOPE

ATT_IIQ_ACTIVITY_CONFIG

ATT_IIQ_ARCHIVES

ATT_IIQ_SNAPSHOTS

ATT_IIQ_EVENTS

ATT_IIQ_PROVISIONING_REQUESTS

APP_IDM

ATT_IDM_ROLES

ARG_FORCE_NEW_ACCOUNT

ARG_ADD_DATE

ARG_REMOVE_DATE

ARG_COMMENTS

ARG_ASSIGNMENT_NOTE

ARG_LINK_EDIT

ARG_CHECK_POLICY

ARG_ASSIGNMENT

ARG_SECRET

ARG_PERMITTED_BY

ATT_IIQ_ROLE_PROFILES

ATT_IIQ_ROLE_CHILD

ATT_IIQ_ROLE_REQUIREMENT

ATT_IIQ_ROLE_PERMIT

ATT_IIQ_ROLE_GRANTED_SCOPE

ATT_IIQ_ROLE_GRANTED_CAPABILITY

ARG_PREVIOUS_VALUE

ARG_TYPE

ARG_REQUIRED

ARG_TYPE_DATE

ARG_ALLOW_SIMPLIFICATION

ARG_DESTINATION_IDENTITY

ARG_SOURCE_IDENTITY

OBJECT_TYPE_MANAGED_ATTRIBUTE

OBJECT_TYPE_GROUP

ACCOUNT_GROUP_NAME

ACCOUNT_GROUP_DESCRIPTION

ACCOUNT_GROUP_OWNER

ACCOUNT_GROUP_SCOPE

ACCOUNT_GROUP_APPLICATION

ACCOUNT_GROUP_NATIVE_IDENTITY

ACCOUNT_GROUP_REFERENCE_ATTRIBUTE

ATT_PLAN_IDENTITY

ATT_PLAN_ACCOUNTS

ATT_PLAN_OBJECTS

ATT_PLAN_REQUESTERS

ATT_PLAN_ARGUMENTS

ATT_PLAN_INTEGRATION_DATA

ATT_PLAN_PROFILE_ORINDAL

ATT_OP

ATT_OBJECT_APPLICATION

ATT_OBJECT_INSTANCE

ATT_OBJECT_TYPE

ATT_OBJECT_ID

ATT_OBJECT_UUID