Any transform logic to set uid attribute with increment number(firstname's first letter.lastname.incrementnumber)

Identity Security Cloud (ISC) ISC Discussion and Questions
1

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Please consider addressing the following when creating your topic:

  • What have you tried?
    I am trying to create transform logic to set uid number with first name first letter+.+lastname+increment number
  • What errors did you face (share screenshots)?
  • Share the details of your efforts (code / search query, workflow json etc.)?
  • What is the result you are getting and what were you expecting?
    I am expecting if first name test and last name user then it must set t.user , if t.user already present then it should set t.user1, t.user2 and so on
2

Hi @mkumariaas,

You can leverage on username generator type transform. You can refer Username Generator | SailPoint Developer Community

  • Vasanth
3

@vasanthrajsp29 this is for only account profile during provision process so i have tried but not working. As per document it says it will use to set account profile attribute like native ID in ad (Dn)
if you have sample please share

4

@mkumariaas Where are you looking to use this uid? Because if it is for new accounts, the username generator as @vasanthrajsp29 suggested is the recommended way to avoid unnecessary complexity of doing it manually. You can easily achieve your requirement with it.

5

@sushantkulkarni i am asking about below attribute, I have tried and it is not working and found these context"Use the username generator transform to specify logic to use when it derives a unique value for an attribute in an account create profile. " so it seems it will not work

image
image1458×331 28.7 KB

6

Oh I see, so this is not for target systems but for creating new identities coming in from your HR system. Can you share some details on the HR system you have as the authoritative source here? Based on it, you can look into different ways to generate this new attribute to use as SailPoint Username.

If possible, try not to generate it, but utilize an existing attribute from the HR system which is unique for each user.

7

@sushantkulkarni this is something i want to develop , I do not want to change anywhere else like operation rule or anywhere just want to achieve it here.

8

Hi @mkumariaas,

If you dont want to go create profile for generating UID other option, I think is to go for cloud rule (Identity Rule) for generating this pattern to check uniqueness.

My approach would generate uid in AD with your patter (t.user(unique counter)@domain) and use this value in UID attribute by using account attribute transform.

-Vasanth

9

Hi @mkumariaas ,

I think you can use Identity Attribute Rule | SailPoint Developer Community . This rule can help you develop your own logic to achieve your requirement.

Thanks!

10

@GOKUL_ANANTH_M cloud rule need to go with Sailpoint and they need to deploy so want to avoid

11

I have my auth source as Database and AD it going to create in letter step.
Also one uid assignment i think if we need to reassign with AD we need to go with identity transfer or migrate process unless u have something other so please share i can try that

12

Hi @mkumariaas,

Noted, if you don’t want to go for Identity Attribute Rule. Then you may follow this approach.

1.Use this below transform in UID.
2.Then in provisioning tab under create account you may add AD/Entra Source.
3.AD Source create account profile you may use Username Generator transform to make your pattern.
4.Once this AD account is created you will get expected UID in Identity Profile.

(It will check if user has Entra UPN then it will reflect as userid else it will create EmployeeNO@domain as temporary uid)

{
    "name": "Update UserID - DB",
    "type": "firstValid",
    "attributes": {
        "values": [
            {
                "attributes": {
                    "attributeName": "userPrincipalName",
                    "sourceName": "Entra"
                },
                "type": "accountAttribute"
            },
            {
                "attributes": {
                    "values": [
                        {
                            "attributes": {
                                "attributeName": "EmployeeNum",
                                "sourceName": "DB"
                            },
                            "type": "accountAttribute"
                        },
                        "@domain.com"
                    ]
                },
                "type": "concat"
            },
            "NONE"
        ]
    }
}

-Vasanth

13

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.