Account Selector Rule Returning null

[chrisk (Christopher Knapp)]

Hello,

We are on IIQ 8.3 and have some Roles setup for a specific employeeType. For the IT Role we are using an account selector rule that I am having trouble with.

I only want the role to provision if the AD Account has an employeeType of ‘Contractor’.

The problem is some Contractors are not given an AD Account. In this scenario, the Rule returns a null value and tries to provision one (not wanted) and fails.

I just want the rule to provision the entitlement if the rule criteria is met, and nothing else.

Here is the rule -

 if (null != links) {
   for (Link link : links) {
    
     if(null!=link.getAttribute("employeeType")){
   	  
   		  if ("Contractor".equalsIgnoreCase(link.getAttribute("employeeType"))){
   		return link;
   	  }
     }
   }
 }

  return null;

If there is not a link on the Identity Cube, does anyone know a better way to make it just not attempt provisioning?

Is it better if I just add the criteria into the Match List on the Business Role, that way it wont even get the Business Role if no AD Account is found?

Thanks for any assistance!

Chris

[Jarin_James]

Hi @chrisk

Yes, you are right. The AccountSelector rule is only for selecting a target account for provisioning entitlements for an IT role when a user holds more than one account on the target application. The Assignment Rule (using Rule, MatchList, Population etc.) in the Business Role should be leveraged to check whether it should be assigned to the user or not.