BeanShell basics
BeanShell essentials for SailPoint rules: syntax, the IdentityIQ API objects, logging and safe scripting patterns.
BeanShell essentials for SailPoint rules: syntax, the IdentityIQ API objects, logging and safe scripting patterns.
- BeanShell is uncompiled Java with the full IIQ API
- context is your handle to read and save objects
- Use QueryOptions and projection for efficient reads
- Null-check, avoid heavy per-identity queries, log at debug
BeanShell in a nutshell
BeanShell runs Java without compilation. You can declare loosely typed variables, call Java classes, and use the full IdentityIQ API from inside a rule.
Key objects
context (SailPointContext) is your gateway to query and save objects; log writes to the server log; and rule-specific inputs like identity, account or link give you the data to work on.
Querying with context
Use context.getObjectByName, context.search and QueryOptions to read objects efficiently. Always project only the columns you need for performance.
Safe patterns
Null-check inputs, avoid heavy queries in per-identity rules, never commit unless required, and log at debug rather than printing to stdout.