Blank Attribute in Provisioning Policy

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

Does IDN supports provisioning blank attribute in Disable Provisioning Policy. We are trying to clear an attribute in Source systems (IBM i) during disablement. But it is not working.
We have tried multiple ways but nothing is working
Like setting identityAttribute and then referencing the transform

{
  "name": "blank",
  "type": "static",
  "attributes": {
    "value":""
  }
}

or

{
            "name": "",
            "transform": {
                "attributes": {
                    "blank": {
                        "attributes": {
                            "value": "X"
                        },
                        "type": "static"
                    },
                    "value": "#if($blank!='X') Skip #else #end"
                },
                "type": "static"
            },
            "attributes": {},
            "isRequired": false,
            "type": "string",
            "isMultiValued": false
        }

Or

{
            "name": "",
            "transform": {
                "attributes": {
                    "blank": {
                        "attributes": {
                            "value": ""
                        },
                        "type": "static"
                    },
                    "value": "$blank"
                },
                "type": "static"
            },
            "attributes": {},
            "isRequired": false,
            "type": "string",
            "isMultiValued": false
        }

Or

{
            "name": "",
            "transform": {
                "attributes": {
                    "value": ""
                },
                "type": "static"
            },
            "attributes": {},
            "isRequired": false,
            "type": "string",
            "isMultiValued": false
        }
2

Hi @ashishbhatia_custih

In my experience with a similar scenario, clearing or setting blank via a Disable Provisioning Policy/Profile does not work. I’ll let an expert confirm. To get around this problem, I had to use the before provisioning rule to clear out the attribute in question.

3

I agree with @sushant1, I also faced this issue. I am in a conclusion that we cannot override an attribute value with blank/empty. If it works I might say you are lucky. You should go for Before Provisioning Rule with remove attribute request.

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.