Aggregating Complex Objects

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

Is there any way to fetch the manager values directly from JSON path expressions or what as we cant fetch it directly the manager attribute as we are using advanced filter already utilizing based on custom security attributes, in that case we cant keep manager as schema attribute, Do we have any other way to fetch it.

your help would be highly appreciated.

2

you mean for account schema manager attribute not avail?

3

Are you using an Entra ID SaaS Integration?

4

If your source is Entra ID SaaS, then there is no way to add manager to the account schema while using advanced filter

However, in our case we came up with a solution to avoid advanced filter using a multi-faced approach

What is your filter? Can you please share?

Also, What is the purpose of getting the manager attribute onto the account?
Are you using this in attribute sync? If you need this for Account create then here is the solution:Get Reference Identity Attribute | SailPoint Developer Community

5

Its available not we cant aggregate as we are dependent on advanced filter condition based on custom security attributes.

6

Yes you are correct on this

7

We are also pulling users based on filter condition and we need to have the manager details but in our case as we are relying on advanced filters we not able to pull manager information. I was trying to create some JSON path based objects in schema but unable to fetch the manager , is there any way to get this done as manager field is very much required for us to have.

Current Aggregation Filter :

onPremisesExtensionAttributes/extensionAttribute15 eq ‘abc.com’

8

Got it

Since it is a onPremisesExtensionAttribute, its should advance filter.

To my understanding this is a limitation - cannot aggregate manager attribute.

Thinking aloud:
Can Entra ID somehow pupulate the manager attribute into another attribute and this other attribute can be aggregated? But that wont be manager

I understand that you need manager but, If you can share the use case why you need manager, may be we can brainstorm here.

9

Hey we tried a lot in end SailPoint has suggested us to go for NERM or utilize their expert services. No application team is not convinced to store the manager attribute at any other attribute since manager is dedicated field which is already present.

Thanks @vbdm we will brainstorm more on this but would like to thank you for looking into this problem statement.

10

Got it @LearningStar

Ones you have engaged the professional services, please update here on the solution that you have adopted.

Thank you

1 Like
11

Hi @vbdm : Quick Question

Cant we use the customSecurityAttributes/ExtensionAttributes/AccountType eq ‘TEST’ and employeetype eq ‘INTERNAL’ all together ? Its not working for me could you suggest what’s wrong with below expression

customSecurityAttributes/ExtensionAttributes/AccountType eq ‘TEST’ and employeeType eq ‘INTERNAL’

Could you please suggest if you feel that there is correction? if not we will open support ticket with SailPoint

12

Hi @LearningStar

If its a CSA attribute then your query should have worked. But you mentioned in the previous post that it is a

But now, if you have We also found out that the entire query should be included in parantheses i.e.

(AccountType eq ‘TEST’ and employeeType eq ‘INTERNAL’)

Can you try this?

Thanks

13

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.