Add entitlement via Before Provisioning Rule

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi,

I am trying to add multiple entitlements using loop in my before provisioning rule for JDBC connector as below

AttributeRequest attributeRequest = new ProvisioningPlan.AttributeRequest();
attributeRequest.setName(attributeName);
attributeRequest.setOperation(ProvisioningPlan.Operation.Add);
attributeRequest.setValue(attributeValue);

The rule is working as expected and provisioning works as expected.

But the issue I faced, where Account Details of the JDBC account did not recognize entire added entitlements. It seems it only recognize the last entitlement added in the plan.

Scenario:
Entitlement A, Entitlement B, Entitlement C are added into provisioning plan in this sequence.

Upon successful provisioning and account created, under Account Details : Only Entitlement C shown under Entitlements

Not sure anywhere I am missing.

2

Hi Joshua! In your scenario, how do you trigger the provisioning? Do you request entitlement C (and add the others with code)?

And so to understand the original problem, why you are provisioning using a BP rule rather than using Access Policies or Roles?

3

Hi Julian,

My case is a special one. It is a uncommon integration method. We are using the SQL table as a “queue” for a RPA bot to pick up to create in the target system.

RPA require us to provide all entitlements in a single column, hence it is not possible in using common placeholder in IDN to create the account entry. That’s why we are using BP rule to do this.