Calculate AD attribute value based on lifecycle state

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

I am fairly new to the IDN transforms. I am trying to set a "“TRUE” value to the AD attribute using the attribute sync and transform on the Identity attribute.Trying to create a transform where want to use Lifecycle status to populate TRUE value in AD attribute.
for example ,
If LCS is inactive , AD attribute should be get set to “TRUE”.
I trying to get it done with First valid, but not sure how to use both identity attribute and account attribute in a transform.
TIA!

2

You can try a simple transform like this:

{
	"attributes": {
		"usrStatus": {
			"attributes": {
				"values": [
				  {
					"attributes": {
					  "sourceName": "Active Directory",
					  "attributeName": "iiqDisabled"
					},
					"type": "accountAttribute"
				  },
				  {
					"attributes": {
					  "name": "cloudLifecycleState"
					},
					"type": "identityAttribute"
				  },
				  {
					"attributes": {
					  "value": "none"
					},
					"type": "static"
				  }
				]
			},
			"type": "firstValid"
		},
		"value": "#if($usrStatus != 'none' && $usrStatus == 'inactive')TRUE#{else}FALSE#end"
	},
	"type": "static",  
	"name": "Test Status"
}

Please modify this to use your specific attributes and conditions.

Kindly refer to the transforms documentation here for more examples of transform usage.

Hope this helps!

1 Like
3

Thank you @sharvari for above example. It helped.

1 Like
4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.