Attribute spliting in Active Directory

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

I am using the sailpoint iiq 8.4 and i have one delimeted file and Active directory application so in the delimeted file i have the attribute location which contains the big data where the whole location should split into the part which are attributes of the Active directory for example location is S15street-Queens-NewYork-500085 so it should fall in active directory like

streetAddress -----------> S15street-Queens
st -------------->S15street
l --------------->NewYork
postalCode---------->50000591

i did the authoritative csv file on boarded when ever i do the manage user access and give the entitlement the identity gets the link of active directory application by create operation but the values of streetAddress, st, l, postalCode should reflecting
in the active directory how to get that in the sailpoint]*

for example see the attribute in the target application

image
image1920×1080 268 KB

;

like this we have the attributes as streetAddress,st,l,postalCode

2

@Harsha_Vardhan_Bondi Please navigate to Administrator Console and check the Provisioining Transaction to check if you see the AD transaction and all the these attributes being passed from IIQ to AD.

3

Welcome to the community, Harsha.

You can do this in the AD Create Account provisioning policy. SailPoint Documentation

First, make sure the CSV location value is available as an Identity attribute. If it currently exists only on the delimited-file account, map it under Identity Mappings, then run Identity Refresh with Refresh identity attributes selected.

You should then be able to read it as:

identity.getStringAttribute("location")

In the AD Create Account policy, add:

streetAddress
l
st
postalCode

Create one FieldValue rule with the following logic, then select that same rule as the value source for all four fields:

String location = identity.getStringAttribute("location");
if (location == null) return null;

String[] parts = location.split("-", -1);
if (parts.length != 4) return null;

String name = field.getName();

if ("streetAddress".equals(name)) return parts[0].trim();
if ("l".equals(name))             return parts[1].trim();
if ("st".equals(name))            return parts[2].trim();
if ("postalCode".equals(name))    return parts[3].trim();

return null;

Assuming your format is:

Street-City-State-PostalCode

then:

S15street-Queens-NewYork-500085

produces:

streetAddress = S15street
l             = Queens
st            = NewYork
postalCode    = 500085

In AD, l is City/Locality and st is State/Province. Microsoft Learn

Finally, test with a user who does not already have an AD account. Check the provisioning request and confirm these four values are present in the Create request.

5

@Harsha_Vardhan_Bondi Is this issue resolved? If yes, could you please share how did you make it work to help fellow sailors having similar issue.

6

Split Attribute in Active directory.docx (84.1 KB)

here is the documentation which i have done according to my knowledge

7

@Harsha_Vardhan_Bondi Did it work in your case and have you tested all valid use cases?

8

Good Afternoon SIr,

Yes it worked in my case