Batch update of Contract End Date for multiple non employee users

IdentityIQ (IIQ) IIQ Discussion and Questions
1

We are trying to edit almost 600+ non employee accounts contract end date though Batch Request but were getting Failures. Any ideas on how to fix it or update contract end date of bulk users.

2

Hi @pbobadil

Welcome to SailPoint developer community.

Could you please share the batch request sample data you used and any error if you are facing.

Thanks
Krish

3

Paul,
I agree you will need to upload your batch file. If you could provide more context it might be easier to see your use case. Are you trying to set an identity attribute called contractEndDate from a batch request, and that is the end of the use case, or are you trying to set the accountExpires field in Active Directory which most clients will use to automatically shut down a non-employee’s access after their contract end date?

The most popular way to update the accountExpires value is using an attribute sync function where you do the following:

  1. Bring in the identity type (employee or contractor normally) and contract end date via your auth source.
  2. Save that value as an identity attribute named contractEndDate this is done by using a source mapping from that application and value
  3. Write that value out to Active Directory with a transformation rule that has this logic:
    a) Check the presence of contractEndDate and type on the user
    b) If the user is an employee or has a null contractEndDate, return 9223372036854775807 (the value of never expires)
    c) If not, convert the contract end date to a java epoch and then convert that to a windows epoch date. There are algorithms available on line for this.

Hope this helps.
Keith Smith

4

Hi, set a value on identity attribute called contractEndDate from a batch request, and that is the end of the use case. Thank you

5

@pbobadil
Can you please share the sample file you used so that we can check what’s wrong in that

6

Wish you shared some screenshot masking the data, however I have replicated some scenarios.

  1. Error processing Batch Request - Not a valid header filed: contractEndDate

Make sure that contractEndDate is editable, you get this error when you mark this attribute as ReadOnly. You can change this setting in Global Settings → Identity Mappings

  1. No Error at all, just Result as failed
    If you click on Result - failed, it will display the error message. Check that.
    If any Target sync is there for that attribute, it might be causing some null pointer exception.

  2. Date format issue

Hope this helps :slight_smile:

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.