I’m on IdentityIQ 8.3p1. I need to make a batch change of a large number of identities (~10,000) to correct some attributes, including a multivalue attribute. Is there a way to do this with the Batch Request system? Or is there another mechanism that I should use?
For large scale identity updates in IdentityIQ 8.3p1, the simplest option is a ModifyIdentity Batch Request, using a CSV with operation, identityName, and columns that exactly match editable identity or extended attribute names. This works well for straightforward updates, even at ~10,000 identities. However, multi-value attributes can be problematic in Batch Requests, as support outside of roles and entitlements is inconsistent and depends on how the attribute is defined.
For more complex updates, especially involving multi value attributes, a rule or workflow based approach that reads from a CSV and iterates through the data programmatically provides better control, validation, and error handling. This workflow can be triggered directly by uploading a CSV internally or externally via the SCIM API, which can read from the same CSV and invoke the workflow per record or in controlled batches.
2 Likes