Batch / Scheduled Tasks

This sections helps to understand purpose of batch tasks in OpenIAM, explains idea of out of the box tasks.

Batch task

Usage of batch task provides ability to support any kind of business logic (like sending out notifications, build custom reports other periodical routine tasks). OpenIAM provides set of out of the box batch tasks, some of them can be customized via groovy scripts, some should remained as delivered. Below you can find descriptions.

Running a shell script with a batch task

If running sh. is required/necessary, you can use the following a code reference:

ProcessBuilder processBuilder = new ProcessBuilder()

                        println "parameter_1: " + parameter_1

                        println "parameter_2: " + parameter_2

                        processBuilder.command("bash", "-c",

                                "sh  /tmp/script.sh ${parameter_1} ${parameter_2} ")


                    try {

                        Process process = processBuilder.start()

                        BufferedReader reader = new BufferedReader(

                                new InputStreamReader(process.getInputStream()))

                        StringBuilder output = new StringBuilder()

                        String line

                        while ((line = reader.readLine()) != null) {

                            output.append(line)

                        }

                        println("Script output:" + output)

                       

                    } catch (IOException e) {

                        e.printStackTrace()

                    } catch (InterruptedException e) {

                        e.printStackTrace()

                    }

Due to security reasons, java.io package is not in the whitelist of imports (you can't just instantiate classes of this package in groovy). To tackle that add

-Dorg.openiam.groovy.extra.whitelist.package=java.io

file for groovy-manager and esb, as follows:

into openiam-docker-compose/3.2/services/docker-compose.yaml (for Docker) or to /etc/systemd/system/openiam-groovy.service and /etc/systemd/system/openiam-esb.service (for RPM).

For example,git status for RPM:

ExecStart=/usr/local/openiam/services/start.sh groovy-manager "-Xmx512m -Djdk.tls.client.protocols=TLSv1.2 
-Dorg.openiam.groovy.extra.whitelist.package=java.io

Out of the box tasks

Access Certification Reminder

Access Certification reporting

ACCOUNT_LOCKED_NOTIFICATION

Activate by Start Date

Activation reminder

Clean Auth State table

Cleanup OLD CSV Files

Delete/Deactivate by last Data

Disable by last date check

Escalation of expired requests

Failed provision requests report

INACTIVE_USER

Notification of expiring/revoke of expired access

Notification reminders for approvers

PASSWORD_EXPIRED

PASSWORD_NEAR_EXP

Perform Business Rules recalculation