Access data objects
Advanced Identity Cloud gives you the ability to access three types of data objects so you can seamlessly manage your users, control platform behavior, and interact with the underlying database storage:
-
Managed objects (for identity orchestration): Access these objects to create, update, or query user accounts, device profiles, and group relationships. This is the primary layer used by your sync mappings and workflows to automate the lifecycle of identities.
-
Configuration objects (for DevOps and automation): Access these objects to programmatically read or modify platform settings, authentication journeys, and connector definitions. This allows you to manage your identity configuration as code, enabling automated backups and migration between test and production environments.
-
Repository objects (for low-level auditing and data parity): Access these objects to directly interact with the persistent database layer behind the platform. This is critical when you need to perform deep data troubleshooting, structural auditing, or mass data operations that bypass standard workflow logic.
Advanced Identity Cloud standardizes the objects through a uniform programming model. This model uses the Resource API to query and manipulate all objects. The URL or URI that is used to identify the target object for an operation depends on the object type.
You can access data objects in the following ways:
-
Access data objects using scripts
-
Access data objects using REST
-
Query data objects
-
-
Access data objects (between two Advanced Identity Cloud tenants or between an Advanced Identity Cloud tenant and a PingIDM instance) using a remote proxy.