Guidewire InsuranceSuite

Guidewire InsuranceSuite is a core system that provides policy administration, billing, underwriting, and claims management across the full P&C insurance lifecycle.

The Guidewire InsuranceSuite adapter provides Axonius with visibility into your publicly accessible assets, including user, permission, and application settings data.

Asset Types Fetched

• Users
• Permissions
• Application Settings

Data Retrieved through the Adapter

The adapter retrieves information to provide visibility into your publicly accessible assets. The retrieved data for each asset type may include:

• Users - Data such as user identity, account status, and associated metadata.
• Permissions - Data regarding assigned API roles and field-level permissions.
• Application Settings - Application settings configured in your Guidewire InsuranceSuite environment. This data is fetched only when Fetch Application Settings is enabled.

Before You Begin

Required Ports

• TCP Port 443

Authentication Methods

• OAuth 2.0 Client Credentials

Required Permissions

The adapter connection requires that the user account used to connect has the following permissions within the Guidewire Cloud Platform:

• OAuth 2.0 Client Credentials Flow - Configured to use this flow for authentication.
• API Role Assignment - Assigned an API Role that allows read access to the specific Admin API endpoints, such as users, roles, and security zones. Access to the security zones endpoint is required only when Fetch Application Settings is enabled.
• Correct OAuth Scopes - Contains the correct OAuth scopes for Administration resources in the JWT Access Token.

APIs

Axonius uses the Guidewire InsuranceSuite Admin API to retrieve asset data.

Axonius uses the following endpoints:

• Users
  • GET /rest/admin/v1/users - Fetch user accounts.
• Permissions
  • GET /rest/admin/v1/roles - Fetch all roles and their IDs.
  • GET /rest/admin/v1/roles/{roleId}/permissions - Fetch the permissions assigned to each role.
• Application Settings (only when Fetch Application Settings is enabled)
  • GET /rest/admin/v1/security-zones - Fetch security zone settings.
  • GET /rest/admin/v1/users - Also used to fetch settings.

Axonius also sends a POST request to the Token URL to obtain the OAuth 2.0 access token.

Generating Guidewire Cloud Credentials

1. Log in to Guidewire Home.
2. Navigate to the Guidewire Hub (the identity federation service and trusted authorization server).
3. Create a new application registration or submit a request via the Guidewire Community portal to register a new InsuranceSuite REST API application.
4. Select the OAuth 2.0 Client Credentials flow during registration.
5. Assign the appropriate API Roles that allow read access to the specific Admin API endpoints, such as users, roles, and security zones.
6. Record the generated Client ID, Client Secret, and the platform-level Token URL.

Supported from Version

This adapter is supported from Axonius version 8.0.10.

Connection Parameters

To connect the adapter in Axonius, provide the following parameters.

Required Parameters

1. Host Name or IP Address - Enter the base URL for the specific InsuranceSuite product, such as PolicyCenter, ClaimCenter, or BillingCenter.
2. Client ID - Enter the Client ID associated with the OAuth 2.0 Client Credentials.
3. Client Secret - Enter the Client Secret associated with the Client ID.
4. Token URL - Enter the URL of the platform-level OAuth 2.0 Authorization Server that issues the JWT Access Token.

Advanced Settings

1. Fetch Application Settings (default: disabled) - Select this option to fetch the application settings configured in your Guidewire InsuranceSuite environment as Application Settings assets.