AD Account Creation Description issue

[swcoleman (Scott Coleman)]

Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

When an AD Account gets created we are writing the following into the AD description field. “Created by IdentityNow - $date” this works but the date is GMT not local time. As a result the timestamps are off by 5 hours. I have looked a little and i don’t see anything about doing math in static value fields during account creation.

Has anyone else noticed this and found a fix?

I also don’t see a Time Zone listed anywhere in the tenant settings.

[margocbain (Margo Bain)]

Hi Scott,

If you’re going to use the description field for notes like Created on, Enabled on, etc., I’d recommend using the Services Standard Before provisioning rule. You will need to raise a support ticket to get this deployed to your tenant if it has not already been done. Some info is available here: Services Standard Before Provisioning Rule - #3 by edmarks

This will then allow you to update the description field easily based on changes to identity attributes.e.g., the below would be placed into your source by API or using the VS Code extension

{
     "Action":"UpdateAttribute",
     "Attribute":"description",
     "Value":"Disabled by IdentityNow Automation on #{now.MM/dd/yyyy}"
}

You can view and update your tenant’s time zone by API: get-org-config | SailPoint Developer Community

[swcoleman (Scott Coleman)]

Thanks @margocbain I will take a look at the Services Standard Before Provisioning Rule. It does appear to be installed in our tenant.

I also used the API and verified that that our tenant is the right time zone. Given that we are in the right time zone it seems like a bug that the date reference wouldn’t adjust for the time zone.

[JackSparrow (Theja C)]

@swcoleman, can you try with “dateMath” transform where you can add or subtract hours to the existing time.

Date Math | SailPoint Developer Community

Below is an example.

{
            "name": "description",
            "transform": {
                "attributes": {
                    "date": {
                        "attributes": {
                            "input": {
                                "attributes": {
                                    "input": "",
                                    "expression": "now+5h",
                                    "roundUp": false
                                },
                                "type": "dateMath"
                            },
                            "inputFormat": "yyyy-MM-dd'T'HH:mm",
                            "outputFormat": "MM/dd/yyyy HH:mm"
                        },
                        "type": "dateFormat"
                    },
                    "value": "Created by IdentityNow - $date"
                },
                "type": "static"
            },
            "attributes": {},
            "isRequired": false,
            "type": "string",
            "isMultiValued": false
        }