Accessing Source attributes from SaaS Connector

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Is there direct method of retrieving values from the IdentityNow source, within the SaaS connector code? Beyond what is availble from config?

What I need:

  • source.id - I want to retrieve additional attributes from the Identity to include in the provisioning plan. From the input, I do not always have a unique value to identify the identity by, but can use v3/search accounts(accountId:“${uid}”) AND @accounts(source.id:“${this.idnSourceId}”)

  • source.name - So that the source name is not hardcoded in the connector itself. To be used in email notifications triggered via workflow

    • source.owner - Recipient of those emails

    • source.managementWorkgroup - Additional recipient of those emails

What I have done so far to achieve this, is manually adding the source id to the sourceConfig, but to retrieve the name, owner, and governance group, they will end up being API requests that feel unnecessary.

2

Hi Kurt,

I believe you should be able to do that for any source, including SaaS connectors. This is what is generally put in a provisioning policy of type ‘CREATE’ or ‘UPDATE’ (depending on if it is a new or existing account). You can look at the documentation to add this in the API here: create-provisioning-policy | SailPoint Developer Community

The caveat is that the values you add in this provisioning policy will always be added if an attribute sync is triggered.

But this does mean they are always in the provisioning plan.

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.