AccountSelector vs IdentitySelector

Hi all,

What is the difference between AccountSelector and IdentitySelector rules?

What are the different scenarios that these 2 rules are used in?

Is there a official documentation for this?

Thanks in advance

Hi @rishavghoshacc,

account select are used when you must declare a logic to provisioning whe an identity has more then one account of the same application.

For example you can have 2 AD account, a normal account and a privileged account, and you want that account requests goes only on normal account or you dont want provisioning some groups on privileged account. On those cases you can deploy an AccountSelector rule to declare the behavior.

An IdentitySelector rule are use on quinklinks populations to decide what you can request for certain identities. For example, you dont want provide some Roles for externals or you want that a group of identity cant requests certains Roles. There you can use an IdentitySelector.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.