Beforeprovisioning rule-salesforce

nandiniks · August 21, 2024, 9:32am

<?xml version='1.0' encoding='UTF-8'?> This SalesforceProvision rule can to disable the profile when profileid is revoked from sailpoint UAR. <![CDATA[ import java.util.ArrayList; import java.util.List; import sailpoint.object.Identity; import sailpoint.object.ProvisioningPlan.AccountRequest; import sailpoint.object.ProvisioningPlan.AttributeRequest; import sailpoint.object.ProvisioningPlan; import sailpoint.api.Provisioner; import sailpoint.object.*; import sailpoint.tools.Util; import sailpoint.object.ProvisioningPlan.Operation; import sailpoint.object.ProvisioningPlan.AccountRequest.Operation;

    log.info("Inside Rule - BeforeProvisioning - SalesforceBeforeProvisioning");
	
    Identity identity = plan.getIdentity();
    
       if ( plan != null ) {

						   List accounts = plan.getAccountRequests();
								if ( ( accounts != null ) && ( accounts.size() > 0 ) ) {
						  for ( AccountRequest account : accounts ) {
							

							if ( AccountRequest.Operation.Modify.equals( account.getOperation() ) ) {
										 
										  //String nativeIdentity = (String) account.getNativeIdentity();
										
										  AttributeRequest attrReq = account.getAttributeRequest("Profile");
										  
										  AttributeRequest attrReqSpePer = account.getAttributeRequest("Special_Permissions__c");
										  
										  **List<String> SpecialPermissionsList = Arrays.asList(attrReqSpePer.split("\\s*,\\s*"));**
										  
										  List memeberOfListRemoved = new ArrayList();
										  
																		 
													 if ( account != null ) {
													   if ( attrReq != null && ProvisioningPlan.Operation.Remove.equals(attrReq.getOperation()) ) {
														
				                                     if (attrReq.getValue()!=null && attrReq.getValue() instanceof String)
									{
									 account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}
									else if (attrReq.getValue()!=null && attrReq.getValue()instanceof List)
									{
									account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}

										}
										} 
										
										  if (SpecialPermissionsList != null) {
                  if (SpecialPermissionsList instanceof String) {
                      String strGroup = (String) SpecialPermissionsList;
                      memeberOfListRemoved.add(strGroup);
                  } 
                  else if (SpecialPermissionsList instanceof List) {
                       memeberOfListRemoved = (List) SpecialPermissionsList;
                  }
             }
			 
			   for (Iterator iterator = memeberOfListRemoved.iterator(); iterator.hasNext();){
           
				   String  SpecialPermissions = (String) iterator.next();
				   
				   if (SpecialPermissions != null) {
					   iterator.remove();
					 }
					}
			 
										}  									
										}
						  				}
					   					}

]]>

nandiniks · August 21, 2024, 9:34am

HI All,

we seeing error in the line below.
List SpecialPermissionsList = Arrays.asList(attrReqSpePer.split(“\s*,\s*”));

we are trying to split special attribute and convert into a list separated by ; .
Can anyone help on this?

Arun-Kumar · August 21, 2024, 10:02am

Hi @nandiniks,

What is the error you are getting?
attrReqSpePer is String object?
split(“\s*,\s*”) expression will split on commas and consume any spaces either side.

split("\\s*;\\s*") use this express. This will split on semicolon and cousume any spaces either side.

Regards,
Arun

nandiniks · August 21, 2024, 10:29am

nandiniks · August 21, 2024, 10:30am

attrReqSpePer is an attribute request object.

nandiniks · August 21, 2024, 10:32am

attrReqSpePer is AttributeRequest

Arun-Kumar · August 21, 2024, 10:38am

Hi @nandiniks

Are you using List<String> in your code?

List<String> SpecialPermissionsList = Arrays.asList(attrReqSpePer.split("\\s*,\\s*"));   
Remove the <String> and try. like below
List SpecialPermissionsList = Arrays.asList(attrReqSpePer.split("\\s*,\\s*"));

Arun-Kumar · August 21, 2024, 1:11pm

Hi @nandiniks,

Did you get a chance to update the code and check?

nandiniks · August 21, 2024, 3:21pm

Arun Kumar:

List<String> SpecialPermissionsList = Arrays.asList(attrReqSpePer.split("\\s*,\\s*"));   
Remove the <String> and try. like below
List SpecialPermissionsList = Arrays.asList(attrReqSpePer.split("\\s*,\\s*"));

nandiniks · August 21, 2024, 3:22pm

We are seeing still same error Arun.
AttributeRequest object doesn’t have split method?

Arun-Kumar · August 21, 2024, 3:35pm

HI @nandiniks ,

This time you are getting different error could not find method split .
Using split() method, you can split the string.

Try with this

List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split(“\s*,\s*”));

Regards,
Arun

nandiniks · August 21, 2024, 3:39pm

nandiniks · August 21, 2024, 3:40pm

<?xml version='1.0' encoding='UTF-8'?> This SalesforceProvision rule can to disable the profile when profileid is revoked from sailpoint UAR. <![CDATA[ import java.util.ArrayList; import java.util.List; import sailpoint.object.Identity; import sailpoint.object.ProvisioningPlan.AccountRequest; import sailpoint.object.ProvisioningPlan.AttributeRequest; import sailpoint.object.ProvisioningPlan; import sailpoint.api.Provisioner; import sailpoint.object.*; import sailpoint.tools.Util; import sailpoint.object.ProvisioningPlan.Operation; import sailpoint.object.ProvisioningPlan.AccountRequest.Operation;

    log.debug("Inside Rule - BeforeProvisioning - SalesforceBeforeProvisioning");
    Identity identity = plan.getIdentity();
       if ( plan != null ) {

						   List accounts = plan.getAccountRequests();
								if ( ( accounts != null ) && ( accounts.size() > 0 ) ) {
						  for ( AccountRequest account : accounts ) {


							if ( AccountRequest.Operation.Modify.equals( account.getOperation() ) ) {
										  //String nativeIdentity = (String) account.getNativeIdentity();
										  AttributeRequest attrReq = account.getAttributeRequest("Profile");
										  AttributeRequest attrReqSpePer = account.getAttributeRequest("Special_Permissions__c");
										  List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split(“\s*,\s*”));
										  List memeberOfListRemoved = new ArrayList();

													 if ( account != null ) {
													   if ( attrReq != null && ProvisioningPlan.Operation.Remove.equals(attrReq.getOperation()) ) {
				                                     if (attrReq.getValue()!=null && attrReq.getValue() instanceof String)
									{
									 account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}
									else if (attrReq.getValue()!=null && attrReq.getValue()instanceof List)
									{
									account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}

									}	 
									if ( attrReqSpePer != null && ProvisioningPlan.Operation.Remove.equals(attrReq.getOperation()) ) {
										  if (SpecialPermissionsList != null) {
										  if (SpecialPermissionsList instanceof String) {
											  String strGroup = (String) SpecialPermissionsList;
											  memeberOfListRemoved.add(strGroup);
										  } 
										  else if (SpecialPermissionsList instanceof List) {
											   memeberOfListRemoved = (List) SpecialPermissionsList;
										  }
									 }
									   for (Iterator iterator = memeberOfListRemoved.iterator(); iterator.hasNext();){
										   String  SpecialPermissions = (String) iterator.next();
										   if (SpecialPermissions != null) {
											   iterator.remove();
											 }
											}
											}
											}
										}  									
										}
						  				}
					   					}
										 log.debug("exiting Rule - BeforeProvisioning - SalesforceBeforeProvisioning");

]]>

has context menu

Arun-Kumar · August 21, 2024, 3:46pm

use the standard double quotation marks (" ) on line no:35

List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split("\s*,\s*"));

nandiniks · August 21, 2024, 3:50pm

can you please share the updated line here.

Arun-Kumar · August 21, 2024, 3:52pm

please use the below line which has standard double quotation marks(")

List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split("\s*,\s*"));

nandiniks · August 21, 2024, 3:55pm

Arun-Kumar · August 21, 2024, 3:58pm

Sorry. use the below code

List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split("\\s*,\\s*"));

nandiniks · August 21, 2024, 4:05pm

Arun-Kumar · August 21, 2024, 4:13pm


log.info("Inside Rule - BeforeProvisioning - SalesforceBeforeProvisioning");
	
    Identity identity = plan.getIdentity();
    
       if ( plan != null ) {

						   List accounts = plan.getAccountRequests();
								if ( ( accounts != null ) && ( accounts.size() > 0 ) ) {
						  for ( AccountRequest account : accounts ) {
							

							if ( AccountRequest.Operation.Modify.equals( account.getOperation() ) ) {
										 
										  //String nativeIdentity = (String) account.getNativeIdentity();
										
										  AttributeRequest attrReq = account.getAttributeRequest("Profile");
										  
										  AttributeRequest attrReqSpePer = account.getAttributeRequest("Special_Permissions__c");
										  
										  List SpecialPermissionsList = Arrays.asList(attrReqSpePer.toString().split("\\s*,\\s*"));**
										  
										  List memeberOfListRemoved = new ArrayList();
										  
																		 
													 if ( account != null ) {
													   if ( attrReq != null && ProvisioningPlan.Operation.Remove.equals(attrReq.getOperation()) ) {
														
				                                     if (attrReq.getValue()!=null && attrReq.getValue() instanceof String)
									{
									 account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}
									else if (attrReq.getValue()!=null && attrReq.getValue()instanceof List)
									{
									account.setOperation(ProvisioningPlan.AccountRequest.Operation.Disable);
									}

										}
										} 
										
										  if (SpecialPermissionsList != null) {

                  if (SpecialPermissionsList instanceof List) {
                       memeberOfListRemoved = (List) SpecialPermissionsList;
                  }
             }
			 
			   for (Iterator iterator = memeberOfListRemoved.iterator(); iterator.hasNext();){
           
				   String  SpecialPermissions = (String) iterator.next();
				   
				   if (SpecialPermissions != null) {
					   iterator.remove();
					 }
					}
			 
										}  									
										}
						  				}
					   					}

SpecialPermissionsList is List object. No need to check the instanceof String. Try this one

Topic		Replies	Views
Salesforce Role and mover ISC Discussion and Questions identity-security-cloud	4	76	December 5, 2024
JDBC Provisioning Disable ISC Discussion and Questions rules , identity-security-cloud , provisioning	16	209	October 1, 2024
JDBC provisioning rule to remove the roles and disable the user ISC Discussion and Questions provisioning	8	117	November 25, 2024
Issue while validating the before provisioning rule - Can't find where the exact issue is ISC Discussion and Questions rules , identity-security-cloud , provisioning	3	413	March 10, 2024
Before Provisioning Rule Operations - How to remove plan or account request ISC Discussion and Questions rules , provisioning , entitlements	6	2169	July 21, 2023

Beforeprovisioning rule-salesforce

Related topics