Accessing Encrypted Application Attributes in Rule (Web Services Connector)

[sxxnex (sojeong park)]

Is it possible to access encrypted application attributes from a rule?

I am using the Web Services connector and need the value in an After Rule.

Non-encrypted attributes work fine with:

application.getAttributeValue("attribute_name")

But once the attribute is added to the application’s encrypted attributes, the value is no longer retrieved correctly.

I assumed encrypted attributes would be automatically decrypted when accessed from a rule, but that does not seem to be the case.

Is there a supported way to use encrypted application attributes inside a rule?

This question is a follow-up to the post linked below.

Best Practice for Securing API Credentials in Web Services Connector After Rule

I am currently using the Web Services Connector in SailPoint Identity Security Cloud and implementing an After Rule. Inside the After Rule, I am calling an external API and modifying the response based on the API result. At the moment, the API credentials (client ID and client secret) are hardcoded directly in the rule, which is not ideal from a security perspective. I would like to ask: Is there a recommended way to secure or encrypt API credentials when using them in an After Rule? Is…

[patrickboston]

Why did you just post again instead of letting the conversation continue on your original thread?