Attribute Sync on Native Identity

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

Can we do attribute Sync on a native Identity Attribute ?

Thanks,
Chandra

2

Can you tell what’s the name of the attribute, name of the source you have trying to and the type of value like string, boolean.

3

@chandramohan27 Not really.Your connector relies on native identity to keep track of the account as a whole object. As per SailPoint, you need to consider what attributes are necessary to sync and just because you can sync something, doesn’t mean you really should.

And ideally, you must not synchronize the fields which you have marked as Account ID (Native Identity) and Account Name on your source schema. If you do so, you will start seeing unusual behaviors. For every synchronize operation on these fields, SailPoint will detect it as an account deletion because the account identifiers itself have changed. This also happens during tenant refresh and source aggregation. This is something I’ve experienced at one of my clients and the recommendation from SailPoint is to not synchronize Account ID (Native Identity) and Account Name fields to the target systems.

Hope this clarifies.

Thanks,
Arshad.

4

I don’t see any point of doing the sync for native identity . I feel like native identity should be unique for the env and that should not change .

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.