Audit identity attribute change

[gabs1 (Gabriele Stella)]

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Hi team,
Any idea how to enable audit for an attribute that is changing ? Example: Department attribute is changing and I would print out an audit when that happend. So that anytime we can go to the audit table and check.

Regards
Gab.

[kjakubiak (Kamil Jakubiak)]

For authoritative application changes you can use this

How to log Identity Attribute changes

Hello SailPoint Community, I wanted to share a simple BeanShell rule I’ve created achieve simple but quite important audit event. Usualy when incident happens it’s Identity Management System the one guilty of the problem. Sometimes it’s true but more often it’s just because of wrong data received from source systems. That’s why I believe it is crucial to have an audit trail for changes made to identity attributes due to updates in authoritative source systems. This rule logs all such changes in…

For manual changes you have to configure OoTB auditing for identity updates

[gabs1 (Gabriele Stella)]

Hi, thanks.
I was thinking to add some Audit related to the “inactive” attribute.
I believe that identity attributes must be configured via debug only.

[kjakubiak (Kamil Jakubiak)]

Well inactive is usualy calculated so you can use option 1