WedaCon Generic File Upload

A governance platform like SailPoint IdentityIQ is at the core of identity management in many organizations. But many onboarding or provisioning processes still rely on manually uploading CSV or Excel files to a server. This involves SSH access, manual file placement, and operational risk. The WedaCon Generic Uploader plugin changes that: by providing a secure web interface and automating the task launch, it makes IdentityIQ file processing safer, faster, and easier.

The Case

In standard IdentityIQ, importing identity or account data from CSV or Excel files typically requires someone to upload the file to the server directly via SSH. Only server administrators usually have the required access, and mistakes in file placement or permissions can break import tasks.

While IIQ’s Generic Importer task is powerful and flexible, the process to feed it data is cumbersome:

• Users without server access can’t trigger tasks themselves
• Manual uploads create operational bottlenecks
• Misplaced files, wrong paths, or incorrect permissions can easily break import tasks

Any direct access to the server exposes a vulnerability. Users could accidentally modify other files, read sensitive data, or trigger tasks they shouldn’t. That’s why the manual file-based approach is neither secure nor user-friendly.

The Goal

The goal is to eliminate manual server uploads while keeping IdentityIQ secure and auditable.

• Authorized users should be able to upload CSV or Excel files via a browser-based UI
• Uploads should trigger the Generic Importer task automatically
• Data should be processed securely and immediately, without persisting sensitive files unnecessarily
• Access should be role-controlled, auditable, and integrated seamlessly into IIQ workflows

This approach removes the need for direct system access entirely, reducing both operational friction and security risk.

The Preparation

IdentityIQ provides the Generic Importer task, which can handle multiple data sources: CSV, Excel, or custom connectors. This task can be parameterized to use different import drivers and row processing rules.

The capability is already there, but the challenge is how to feed files into the task securely and conveniently without manual server access. We needed a solution that allows:

• Uploads from a standard web browser
• Immediate task execution
• Support for both CSV and Excel files
• Minimal risk of misplacement or error

The Implementation

Without the WedaCon Generic Uploader, IdentityIQ provides the Generic Importer tasks, which are capable of processing CSV and Excel files. However, to run these tasks manually, the files must first be placed directly on the IIQ server, which typically requires SSH access. So, the functionality exists, but it’s not user-friendly, secure, or auditable.

What WedaCon Generic Uploader adds on top

• Web-based upload UI: Users can upload CSV or Excel files via a simple UI
• Secure task launch: Files are processed immediately
• Role-based access control: Only users with the ViewWedaConGenericUploaderRight can upload files
• Support for both file types: The plugin automatically detects the type (CSV or Excel) and processes it accordingly
• Auditing and logging: All uploads and task launches are logged, and task results are visible in IIQ’s Task Results

The result is a secure, convenient, and auditable way to feed data into IIQ.

The Conclusion

Manual file uploads via SSH are a common operational pain point in IdentityIQ. With WedaCon Generic Uploader, organizations get a secure, browser-based solution that eliminates the need for server access while maintaining full auditing, logging, and IIQ integration.

Your teams can now focus on managing identities and provisioning access, not worrying about server file placement or manual task triggers.

Ready to make IdentityIQ safer, faster, and easier to use? Reach out to us through one of our channels, and let’s build seamless, secure plugins that fit your identity management workflow.