Account ID and Name in Application(Accounts) are show as "?"

[jomartolosa]

Which IIQ version are you inquiring about?

Unsure

Please share any images or screenshots, if relevant.

Please share any other relevant files that may be required (for example, logs).

Share all details related to your problem, including any error messages you may have received.

Hi,

We have a web service connection in it we can get the account and group schema then if we assign a new role to an existing IIQ account only then run the account aggregation in the Application(Accounts) the id and name for that account is showing question mark same if we check the identity Application Accounts showing question mark also.

[kjakubiak (Kamil Jakubiak)]

@jomartolosa

Hi,

We have a web service connection in it we can get the account and group schema then if we assign a new role to an existing IIQ account only then run the account aggregation in the Application(Accounts) the id and name for that account is showing question mark same if we check the identity Application

What kind of connector you use? Could you please paste screenshot of this section in Configuration

[Jarin_James]

Hi @jomartolosa,

Please check on the identity attribute in provisioning Policy and Application Schema. This kind of error usually occurs when the native identity doesn’t match with the application identity attribute. Check whether the identity attribute is the same in application schema and provisioning policy.

[jomartolosa]

Hi Kamil,

Here are the connector we use and the schema for your reference

[jomartolosa]

Hi Jarin,

For the identity Attribute we use “userName” I’ve also added the screenshot for the Correlation for your reference.

[Jarin_James]

Hi @jomartolosa,

Is the userName attribute being generated properly by the script or rule in provisioning policy .

[jomartolosa]

When you say generated properly not sure if this is your referring if it’s showing in the schema preview? Yes, it is or if not please let me know as I’m quite confuse.
Thank you.

[Jarin_James]

What is the value generated via the provisioning policy for username. Something like below screenshot

[kjakubiak (Kamil Jakubiak)]

And response mappings for accounts aggregation? As it looks like you’re not correctly mapping the attributes from application to the schema.

[jomartolosa]

It’s not showing anything

[Jarin_James]

Hi @jomartolosa,

You will have to write a script to add the userName. This will be the nativeIdentity in provisioningPlan

[jomartolosa]

here’s the response mapping

it’s showing value when doing the account schema

[jomartolosa]

Will add return identity.getAttribute(“sapusernm”); and see the result after running the aggregation

[vinnysail (vinod kumar maram)]

Do you have the optimistic provisioning enabled in your configuration ?

[jomartolosa]

Hi Vinod,

Not sure I’m not familiar with this optimistic provisioning and it’s use for I’m just new in using SailPoint actually.

[jomartolosa]

Hi @Jarin_James,

tried adding this one on the provision policy now I’m getting this error

here’s the script for your reference

[Jarin_James]

Hi @jomartolosa ,

Please provide us with the logs. Also is there an identity attribute called sapusernm in your instance.

[jomartolosa]

Hi @Jarin_James Yes we have and we use it also for our correlation.

[vinnysail (vinod kumar maram)]

Hi @jomartolosa
Refer the below documentation for optimistic provisioning ?

https://documentation.sailpoint.com/identityiq/help/provisioning/optimisticprovisioning.html