accountPropertyFilter not working for an attribute with "-" in the name

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I am trying to assign the sAMAccountName from AD to a specific identity attribute. However, as there are identities with multiple AD accounts, we need to pick the account where the attribute msDS-cloudExtensionAttribute1 == "PRIMARY"

  • What have you tried?
    Used below block as first option in a firstValid transform
{
    "type": "accountAttribute",
    "attributes": {
        "sourceName": "Active Directory",
        "attributeName": "sAMAccountName",
        "accountPropertyFilter" : "(msDS-cloudExtensionAttribute1 == \"PRIMARY\")"
    }
},
  • What errors did you face (share screenshots)?
    this block is skipped even when the identity has an account in AD where above condition is satisfied

What am I missing or how do I make this logic work?

2

@iamology Have you maybe tried modifying accountPropertyFilter like this?

{
"type": "accountAttribute",
"attributes": {
"sourceName": "Active Directory",
"attributeName": "sAMAccountName",
“accountPropertyFilter”: “(msDS-cloudExtensionAttribute1 == ‘PRIMARY’)”
}
},

3

Thanks @markomanium
Already tried this, but no success

1 Like
4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.