The Identity Cookbook

I have recently updated the OpenIDM shell REST client to include pulling back access, activity and recon logs over REST.  The client helps with command line management of an OpenIDM environment by performing admin tasks over the REST interface simply via a menu system.  The set of scripts is just built on curl. Download the .zip via Github or simply clone the repo.  To run, use ./interactive.sh (which just acts as menu driven front end) or you can still call the scripts individually.  Make sure you configure your OpenIDM server settings and port. User management is based on simple create-read-update-delete tasks, as well as doing specific attribute/value searches. The recon menu allows you to run specific recon tasks, just by adding in the mapping name from the conf/sync.json file.  You can then drill down into the specific recon log entries to check for orphans or missing objects. I will add more scripts as the endpoints develop.  For further information on the OpenIDM REST API take

Last week I updated my OpenAM Shell REST client to not only use the newer REST endpoints of v11, but also added an interactive menu, similar to what I had added to the OpenIDM client and OpenDJ one too. The client was to really test the new API and see what endpoints had been added.  The biggest difference in v11 is the ability to use callbacks within the authentication module response, allowing other attribute values to be passed back to OpenAM, instead of the traditional username and password values. The client is just a collection of individual shell scripts that call curl and jq for additional JSON parsing. JQ isn't really needed as OpenAM now offers a _prettyPrint=true parameter that can do some basic JSON parsing before the response is delivered.  JQ is just useful if you want to iterate over object that comes back and pull out specific attributes. I then added a simple menu system, just using case, with each menu having it's own file, just to keep the management easy.