mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
74 lines
2.1 KiB
Markdown
74 lines
2.1 KiB
Markdown
# API Reference: Building Identity Governance Lifecycle Process
|
|
|
|
## Microsoft Graph API - Identity Governance
|
|
|
|
```python
|
|
import requests
|
|
|
|
token = "Bearer <access_token>"
|
|
headers = {"Authorization": token}
|
|
|
|
# List all users with sign-in activity
|
|
resp = requests.get(
|
|
"https://graph.microsoft.com/v1.0/users",
|
|
headers=headers,
|
|
params={"$select": "id,displayName,userPrincipalName,accountEnabled,"
|
|
"signInActivity,employeeId,department,jobTitle"}
|
|
)
|
|
|
|
# List access reviews
|
|
resp = requests.get(
|
|
"https://graph.microsoft.com/v1.0/identityGovernance/"
|
|
"accessReviews/definitions",
|
|
headers=headers,
|
|
)
|
|
|
|
# Check MFA registration status
|
|
resp = requests.get(
|
|
"https://graph.microsoft.com/v1.0/reports/"
|
|
"authenticationMethods/userRegistrationDetails",
|
|
headers=headers,
|
|
)
|
|
|
|
# List entitlement management access packages
|
|
resp = requests.get(
|
|
"https://graph.microsoft.com/v1.0/identityGovernance/"
|
|
"entitlementManagement/accessPackages",
|
|
headers=headers,
|
|
)
|
|
```
|
|
|
|
## Key Graph API Endpoints
|
|
|
|
| Endpoint | Purpose |
|
|
|----------|---------|
|
|
| `/users` | List/manage user identities |
|
|
| `/identityGovernance/accessReviews` | Access review campaigns |
|
|
| `/identityGovernance/entitlementManagement` | Access packages and catalogs |
|
|
| `/identityGovernance/lifecycleWorkflows` | JML automation workflows |
|
|
| `/reports/authenticationMethods` | MFA registration status |
|
|
| `/auditLogs/signIns` | Sign-in activity logs |
|
|
|
|
## SailPoint IdentityNow API
|
|
|
|
```python
|
|
# Search identities
|
|
resp = requests.get(
|
|
"https://<tenant>.api.identitynow.com/v3/search/identities",
|
|
headers={"Authorization": "Bearer <token>"},
|
|
json={"query": {"query": "department:Engineering"}}
|
|
)
|
|
|
|
# List access profiles
|
|
resp = requests.get(
|
|
"https://<tenant>.api.identitynow.com/v3/access-profiles",
|
|
headers={"Authorization": "Bearer <token>"},
|
|
)
|
|
```
|
|
|
|
### References
|
|
|
|
- Microsoft Graph Identity Governance: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview
|
|
- SailPoint IdentityNow API: https://developer.sailpoint.com/docs/api/v3
|
|
- Workday REST API: https://community.workday.com/sites/default/files/file-hosting/restapi/
|