A chart for AD accounts with no Workday identity in ISC access intelligence center

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Team,

Does anyone has any idea on how to prepare a chart for AD accounts with no Workday identity in ISC access intelligence center?

Thanks

2

Hello @kalyannambi2010
One approach you could try is creating a chart based on identities that don’t have a Workday authoritative account but do have an Active Directory account.

If Workday is your authoritative source, you can filter for identities where:

  • An AD account exists, and
  • No Workday account (or Workday source/account) is associated with the identity.

If you’re using Access Intelligence Center (AIC), check whether the dataset exposes both the application/source and account relationships. If it does, you should be able to create a chart by filtering on AD accounts = Present and Workday accounts = Absent.

If AIC doesn’t expose that relationship directly, another option is to build a Search query or Identity search first to identify those identities and then use that dataset for reporting, if supported in your tenant.

Just to clarify, is Workday configured as your authoritative source, or are you trying to identify orphaned AD accounts regardless of the authoritative source? That will determine the best way to build the report.

3

Hi @kalyannambi2010
I haven’t worked on that requirement but to have such type of a chart for Active Directory (AD) accounts that do not have a corresponding Workday identity within the ISC Access Intelligence Center, you need to create a custom workbook utilizing a Left Outer Join or an Exclusion Filter between your account data and your identity data. At this point of time I can think of the below given pointers. Check if this helps you to achieve your requirement:

  • Gather the data from AD Dataset containing the account records with requried attributes.
  • And the Identity Dataset filter by source.
  • Join the Datasets with Left Outer Join.
  • AD_Accts.Identity_ID EQUALS Identity.ID
4

Hi @Puja_IAM,

Yes, Workday is configured as authoritative source and we need to find the AD accounts with no Workday identity and build the reports in ISC AIC.

Thanks

5

Hi @Deepak_Chaudhary Yes, Workday is configured as authoritative source and we need to find the AD accounts with no Workday identity and build the reports in ISC AIC.

Thanks

6

Goto this tab on the source and download all uncorrelated accounts:

image
image1846Ă—757 51.4 KB