Best way for user conversion?

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

There is a scenario of conversion of user, authoritative source will be changed.

Employee No. comes from authoritative source to IDN. Both have different sets of format for employee no.

As user will be there in one of the source with different accounts, entitlements and role.

When the user gets converted, their new account will be created in other source as birthright.

We are planning to use account movement API to transfer accounts from one user to other using PS script.

And disable/delete the new accounts created as a birthright. Or can put some conditions to stop creating it as birthright.

Can any one let me know is this the correct way for conversion or any better suggestion?

2

Hello there!
If the accounts need to be terianted for the “leaving” Identity , why you don’t simply termiante the Contractor and start a new fresh identity for the employee?

If your company rally wants to mainatin the accounts, my suggestion would be to have it a FirstValid transforms for the mappings, with priority. that way you can correlate the new employee accounts and overwrite the attributes with the source Employee attributes.

It’s really scenario based.

5

Thanks for the suggestion @ipobeidi.
But I believe this will not fit globally,

6

Can anyone please suggest if there is any better approach.

7

For IDN? Unfortunately not. I can imagine you using some custom workflows with some features but that would be to much work and it will required a outside trigger or a more complex thing.

What exactly are you trying to do, just convert the attributes, recreate the identity?

8

Yes, for IDN. We don’t workflow feature enabled.

Requirement:
User conversion from one authoritative source to other.
All the access (accounts and entitlements) should be transferred from old identity to new.
How we are planning to achieve is described in description above.

Looking if there is any better way to achieve this.

9

Why you dont correlate the new Identity with the Old One, User FirstValid transform to grab the identity field information from the new “hr” source. that way you don need to transfer anything.

Is much easier to do that way.