(C) Copyright International Business Machines Corporation 2009.
 All rights reserved.

Component: 
	For ISAM Federation Offering: isam_9.0.4.0_20171201-2325
	For IDaaS Offering: isamsaas_9.0.0.1_20160217-1825_nonproduction

Connector Package: 
	isam_connector_templates_20180316-1000

Date: 
	03-16-2018

Contents:
========
1.0 General description
2.0 Connector Package Highlights
3.0 Prerequisites
4.0 Image directory contents
5.0 Installation instructions
6.0 Additional installation information
7.0 Known problems and workarounds
8.0 Additional product information


1.0 General description
=======================
The connector package is created from RTC which contains SAML2.0 quick connect templates for different SaaS providers. The idea is that a federation connector is constructed from a connector template, and the template contains pre-configured SAML2.0 SSO properties for the specific SaaS Provider, thus simplifying connector configuration. The connector package can be imported and used by ISAM9 federation/Identity-as-a-Service offering and later.


2.0 Connector Package Highlights 
=================================
1. New partner templates added in this Connector package build: 
	Atlassian, Qubole

2. This connector package contains 301 connector templates corresponding to 271 partners + Generic template(listed below): 
Partner ID	Partner Name
		1	 Generic
		2	 Salesforce JIT Provisioning Enabled
		3	 Salesforce JIT Provisioning Disabled
		4	 Google Apps 
		5	 Amazon Web Services 
		6	 Box Auto-Provisioning Disabled
		7	 Box Auto-Provisioning Enabled
		8	 Clarizen 
		9	 CloudPassage Auto-Provisioning Disabled
		10	 CloudPassage Auto-Provisioning Enabled
		11	 Dropbox 
		12	 Adobe Document Cloud
		13	 IBM Connections 
		14	 Intacct 
		15	 JIRA 
		17	 PagerDuty Auto-Provisioning Disabled
		18	 PagerDuty Auto-Provisioning Enabled
		19	 Samanage 
		20	 ServiceNow 
		21	 Syncplicity 
		22	 Zendesk 
		23	 Zoho 
		24	 Lucidchart Auto-Provisioning Disabled
		25	 Lucidchart Auto-Provisioning Enabled
		26	 Active Directory Federation Services (ADFS) 
		27	 BambooHR 
		28	 GitHub Enterprise 
		29	 Citrix 
		30	 InVision 
		32	 Zscaler 
		33	 Concur 
		34	 Workday 
		36	 Netsuite 
		37	 New Relic 
		38	 DocuSign 
		39	 RemedyForce JIT Provisioning Disabled
		40	 RemedyForce JIT Provisioning Enabled
		41	 Office 365 
		42	 Egnyte 
		44	 Greenhouse Software
		45	 SoftLayer 
		46	 SuccessFactors 
		47	 Adobe Creative Cloud 
		48	 ProofHQ Auto-Provisioning Disabled
		49	 ProofHQ Auto-Provisioning Enabled
		50	 WordPress 
		51	 Mozy 
		52	 CrashPlan 
		53	 IBM MaaS360
		54	 Slack 
		57	 ClearSlide 
		58	 WebEx 
		59	 Soonr Workplace 
		61	 Asana 
		62	 LiquidPlanner 
		63	 LogMeIn 
		64	 Okta JIT Provisioning Disabled
		65	 Okta JIT Provisioning Enabled
		66	 SugarCRM
		67	 Namely
		68	 BIME
		69	 Agiloft
		70	 Huddle
		71	 SpringCM
		72	 Unifyle Auto-Provisioning Disabled
		73	 Unifyle Auto-Provisioning Enabled
		75	 kiteworks
		76	 IBM Cloud Security Enforcer
		77	 IBM Blueworks Live
		78	 Sharefile
		79	 Brightcove
		80	 Roambi Business
		81	 IBM Bluemix
		82	 IBM Kenexa Talent Suite
		83	 Desk.com
		84	 Zoura
		85	 StatusPage
		86	 Igloo Auto-Provisioning Disabled
		87	 Igloo Auto-Provisioning Enabled
		88	 Bitium
		89	 BlueJeans
		90	 Informatica Cloud
		91	 OpenDataSoft
		92	 Bonusly
		93	 eSignLive
		94	 Aha
		95	 VersionOne
		96	 Tableau
		97	 DeskPro
		98	 Lesson.ly
		99	 OpenDNS
		100	 TOPdesk
		101	 ANCILE uAlign
		102	 Datadog
		103	 Redbooth
		104	 Watchdox
		105	 Skilljar
		106	 HappyFox
		107	 Ustream
		108	 Litmos
		109	 SAP Netweaver
		110	 ArcGIS
		111	 KanbanTool
		113	 Small Improvements
		114	 UserVoice
		115	 Boomi AtmoSphere 
		116	 Symantec Endpoint Manager
		117	 Fairsail JIT Provisioning Disabled
		118	 Fairsail JIT Provisioning Enabled
		121	 AnswerHub
		122	 Assembla
		123	 Adaptive Insights
		125	 AppDynamics
		126	 Inspired elearnig AutoProvisioning Disabled
		127	 Inspired elearnig AutoProvisioning Enabled
		128	 Domo
		129	 Deputy 
		131	 Envoy
		132	 Aspera Files
		133	 ScreenSteps
		134	 Ceredian
		135	 Appian Auto-Provisioning Disabled
		136	 Appian Auto-Provisioning Enabled
		137	 Showpad JIT Provisioning Disabled
		138	 Showpad JIT Provisioning Enabled
		139	 ITRP
		140	 Teem
		141	 PlanMyleave
		142	 Freshdesk
		143	 Freshservice
		144	 Quandora
		145	 JFrog Artifactory
		146	 Mingle
		147	 Birst Auto-Provisioning Disabled
		148	 Birst Auto-Provisioning Enabled
		149	 Flatter Files Auto-Provisioning Disabled
		150	 Flatter Files Auto-Provisioning Enabled
		151	 Expensify
		153	 Hosted Graphite
		154	 Proxyclick
		155	 Klipfolio
		156	 Jitbit
		157	 Kintone
		158	 MangoApps
		159	 OpsGenie
		160	 Panorama9
		161	 VictorOps
		162	 ShiftPlanning
		163	 UserEcho
		164	 WeekDone
		165	 Convo
		166	 WhosOnLocation
		167	 Targetprocess
		168	 Lifesize
		169	 Wake Auto-Provisioning Disabled
		170	 Wake Auto-Provisioning Enabled
		171	 Replicon
		172	 PeopleHR
		173	 Kissflow
		174	 Cisco Meraki
		175	 Edubrite
		176	 Wrike  Auto-Provisioning Disabled
		177	 Wrike  Auto-Provisioning Enabled
		178	 Buildkite
		179	 Jenkins
		180	 Workboard
		181	 ClickTime
		182	 Dome9
		183	 Interact
		184	 EZOfficeInventory
		185	 Robin
		186	 Thousandeyes
		187	 iMeet Central
		188	 Hackerone
		189	 Base CRM
		190	 Zinc
		192	 Sumo Logic
		193	 Front
		194	 UNIFI
		195	 Promapp Auto-Provisioning Disabled 
		196	 Promapp Auto-Provisioning Enabled 
		197	 PurelyHR
		198	 ImageRelay
		199	 Docebo
		200	 Workfront Auto-Provisioning Disabled 
		201	 Workfront Auto-Provisioning Enabled
		203	 Lokad
		205	 TalentLMS
		206	 HackerRank 
		207	 RunMyProcess 
		208	 Trello
		209	 Proto.io
		210	 Ping Identity
		211	 MyWebTimesheets
		212	 Lattice 
		213	 Skeddly
		214	 ProjectToolBelt
		215	 Nmbrs
		216	 BoldChat
		217	 CanvasLMS
		218	 GaggleAMP
		219	 Hoshinplan
		221	 Appbot
		223	 Bugsnag
		224	 ParkMyCloud
		225	 CoderPad
		226	 Testable
		227	 Hightail 
		228	 Shufflrr Auto-Provisioning Disabled
		229	 Shufflrr Auto-Provisioning Enabled
		230	 jFrog Bintray
		231	 Recognize
		232	 BitGlass
		233	 Velpic-JITProvisioning-disabled 
		234	 Velpic-JITProvisioning-enabled
		235	 ezeep
		236	 Feedly
		237	 IdeaScale
		238	 Honey
		239	 OneDesk-JITProvisioning-disabled 
		240	 OneDesk-JITProvisioning-enabled
		241	 ProdPad
		242	 SignalFX
		243	 CloudAMQP
		244	 Filesanywhere
		245	 Loggly
		246	 Logit.io
		248	 EZRentOut
		249	 Questetra 
		250	 FogBugz
		251	 Orgino
		252	 15Five
		253	 Zoom
		254	 Glasscubes
		255	 CMPUTE
		256	 CloudApp
		257	 HelpScout
		258	 MarketLogic
		259	 ServiceNow AutoProvisioning Enabled
		260	 &frankly
		261	 Knack Auto-Provisioning Disabled
		262	 Knack Auto-Provisioning Enabled
		263	 OneLogin
		264	 Zscaler Admin
		265	 Thomsons Online Benefits
		266	 SproutVideo
		267	 Mural
		268	 CircleHD Auto-provisioning Disabled
		269	 CircleHD Auto-provisioning Enabled
		271	 JobScore Auto-Provisioning Disabled
		272	 JobScore Auto-Provisioning Enabled
		273	 Illumio
		274	 Mode
		275	 Apteligent
		276	 Keeper
		277	 CrossKnowledge Auto-provisioning Disabled
		278	 CrossKnowledge Auto-provisioning Enabled
		279	 Kudos
		280	 Cronitor
		281	 StatusDashboard
		282	 StatusDashboard Admin
		283	 SecretServer
		284	 Humanity
		286	 KnowBe4
		287	 Coggle
		288	 Kanbanize
		289	 Anypoint Platform Mulesoft
		290	 MindTouch
		291	 ITGlue
		292	 Evident.io
		296	 Tinfoil Security
		297	 SmarterU
		298	 Kapost
		299	 KnowledgeOwl
		300	 CakeHR
		301	 LiveChat
		302	 Rollbar
		304	 SnapEngage
		305	 Workplace
		306	 SauceLabs
		307	 LaunchDarkly
		308	 OnDMarc
		309	 Slemma
		310	 JAMF
		311	 BrandFolder
		312	 MindTickle
		313	 Spotinst
		314	 TestFairy
		315	 Droplr
		316	 Nextravel
		317	 Adobe Captivate Prime
		318	 Branch
		319	 RealtimeBoard
		320	 Receptive	
		322	 Ekarda Auto-Provisioning Disabled
		323	 Ekarda Auto-Provisioning Enabled
		324	 Kentik
		326	 Favro
		327	 Sentry
		330	*Qubole
		333	*Atlassian

	
	 * Newly added templates
	
3.0 Prerequisites
==================================
This connector package can be imported on Federation/IDaaS offering of ISAM 9.0 and above appliances. 
 
4.0 Image directory contents
============================
	
	4.1 isam_connector_templates_.pkg 
	-----------------------------------------------
	- guixml directory			
			- connectors
			- java
				- com
					- ibm
						- isam
							- common
								- utils		- This directory contains all connector guixml templates
			- javascripts
				- com
					- ibm
						- isam
							- templates		- This directory contains all guixml javascripts templates
			
	- instructions directory				- This directory contains instructions XML templates in all locales
	- json directory						- Contains all json templates
	- build.txt								- This file contains build number
	- guixml.mappings						- This file contains mapping of partner and corresponding javascript file 
	- template_pkg.properties				- This file contains the federation partner template properties.
	
	
	4.3 ConnectorInstructionsPlaceholders.doc 
	-----------------------------------------
	This file contains table describing the place-holders used in Connector Instructions documents.
	
	4.4 README.txt
	--------------
	This file contains details related to Connector Package release.
	

5.0 Installation instructions 
=============================

	This connector package can be imported ISAM 9 or above appliance.
	Following are the two ways to import connector package: 

	5.1 Import connector package through Local Management Interface
	---------------------------------------------------------------
	1.	Log in to the local management interface.
	2.	From the top menu, select Secure Federation -> Partner Templates.
	3.	On Federation Partner Templates, click import.
	4.	On Import Partner Templates popup, click Browse to select connector template package file ( .pkg). Click Import to import connector package. 
	
	5.2 Import connector package through REST API
	---------------------------------------------
	1.	Copy Connector package on ISAM appliance VM.
	2.	Execute below curl command to deploy connector package. 
		curl -ki  -u admin:admin -X POST -H "Accept:application/json" -H "Content-Type:multipart/form-data" https://<LMI>/mga/partner_templates -F file="@<Connector Package>.pkg"

	Note: Importing connector package does not take care of deleting existing connectors and connector related templates though the connector template is not present in that CT package. As this CT package does not have CSE connector and CIS environment already has CSE connector, you have to manually remove all CSE related connector templates using PostgreSQL commands. 
	For deleting existing connector templates please refer section 8.4
    
6.0 Additional installation information
=======================================

	6.1 Verifying the update through Local Management Interface
	-----------------------------------------------------------
	1.	Log in to the local management interface.
	2.	From the top menu, select Secure Federation -> Partner Templates.
	3.  Verify that following package name is getting displayed:
		Version:20180316-1000		
  
	6.2 Verifying the update through REST API
	------------------------------------------
	1. 	Execute below curl command to deploy connector package. 
		curl -ki  -u admin:admin -X POST -H "Accept:application/json" -H "Content-Type:multipart/form-data" https://<LMI>/mga/partner_templates
	2.  Verify that following package name is getting displayed:
		Version:20180316-1000	
			
 
7.0 Known problems and workarounds
==================================
	1. 	While applying the connector package on ISAM IDaaS offering, following error may occur:
		System Error
		DPWAP0058E The command, 'mesa_config', did not complete within the allotted time.
		
		Workarounds : 
		- Wait for some time and verify if the connector package is updated. 
		- If package is still not updated, restart the appliance.
		
	2. IBM MaaS360 does not accepts Identity Provider entity ID with hypen(-) in it. This issue is being fixed by IBM MaaS360 support team.
		Workaround: Contact IBM MaaS360 support team to set the required entity ID from back end.

8.0 Additional product information
==================================

	8.1 REST API to verify the expected connector GUIXML templates 
	--------------------------------------------------------------
	curl -ki -u admin:admin -X GET -H "Content-Type: application/json" -H "Accept: application/json" https://<LMI>/mga/connector_templates/<template ID>/guixml

		
	8.2 REST API to verify the expected JSON templates 
	---------------------------------------------------
	curl -k -u admin:admin https://<LMI>/mga/connector_templates -H "Accept:application/json"

	
	8.3 REST API to verify the expected instructions XML templates
	--------------------------------------------------------------
	curl -ki -u admin:admin -H "Accept:application/xml" -H "Accept-Language:en" --user admin:admin -X GET https://<LMI>/mga/connector_instructions/<template ID>
		

	8.4 Delete existing connector templates from the database 
	-----------------------------------------------------------
	Note: 
	1. REST APIs can not be used for deleting the connector templates. Hence you need to explicitly delete these templates from database. 
	2. To delete existing connector templates from database, you need administrator access of your ISAM appliance. 
	3. When connector template is deleted corresponding connector will also be deleted.
	
	Following is the SQL command to connect the PostgreSQL database:
		/usr/bin/psql -U www-data -p 2020 config 
		
	Following are the SQL commands to delete connector templates from the PostgreSQL database:
	
	1. For deleting the GUIXML template:
		delete from isam_conn_guixml where template=<template ID>;

		For Example:
		delete from isam_conn_guixml where template=76
		where, 76 is template ID for IBM Cloud Security Enforcer.
		
	2. For deleting the Instructions XML template:
		delete  from isam_conn_instructions  where template=<template ID>;

	3. For deleting the JSON  template:
		delete from isam_connector_templates where id=<template ID>;

		Note: 
		JSON properties are stored in multiple tables. 
		Generally when entry for JSON template is deleted from isam_connector_templates table, all the corresponding entries get deleted automatically from other tables.
		To verify that these entries does not exist, use following commands:
		select   from isam_connector_ta where tempid=<template ID>;
		select   from isam_connector_tp where tempid=<template ID>;
		select   from isam_connectors where template=<template ID>;
		
		If entries exists in any of the above table corresponding to the deleted JSON template, please delete them explicitly.
	
	Similarly you can delete connector related entries from DB2 and Oracle database.

	