Birthright access in IdentityNow

[chandracmmohan27 (chandra Mohan s)]

Hi experts,

I have a query on how to add an AD group as an birthright for all the users in the Sailpoint. can someone please help me with the documents / information for this.

[kaceymaher]

Hi Chandracmmohan27,

I answered a very similar question a couple of days ago in this post:

New Hire Event Best Practice

Hi Rk2021, This is a relatively standard use case. You should be mapping the “lifecycleState” identity profile attribute to the “STATUS” attribute on your HR Source. Ex: [image] Once this is mapped, you will want to configure the various provisioning actions for each state under the provisioning tab for your identity profile (i.e. check enabled for state, add source accounts to enable, and add any desired access profile to the state) Something like this: [image] Regards, Kacey

To summarize:
-A typical approach would leverage the lifecycle states in IDN
-You would achieve this by mapping an attribute from HR source to lifecycle state for your Identity profiles, enabling the lifecycle state, and then assigning the AD group under the provisioning tab for the given lifecycle state.

Screenshot of sample Source attribute to Identity profile attribute mapping:

Screenshot of sample lifecycle state provisioning settings:

Regards,
Kacey