Can we create AD groups through SailPoint IDN?

[nikhleshsdg (Nikhlesh Sheoran)]

HI,

Is is possible to create AD groups through SailPoint IDN?

Thanks,
Nikhlesh

[pablonovoa (Pablo Novoa Lopez)]

Hello Nikhlesh,

No at this moment we can not create AD groups through IDN, if you want to see what idn can do please find the documentation in the following link:AD Supported features

Regards,
Pablo

[schattopadhy (SHANTANU CHATTOPADHYAY)]

@pablonovoa

t this moment we can not create AD groups through IDN, if you want to see what idn can do please find the documentation in the following

At present its not possible you can opt for powershell scripts

[ipobeidi (Ivan Obeidi)]

The Tech is there , as the provisioning engine is still a IIQ running in the BG.

But theres no API or anything to do that.

Best!

[amansingh (Aman Kumar Singh)]

Welcome to dev community and congratulations on your first question.

There is no straight solution for it because for any thing to happen in IDN/ISC you usually require a trigger assuming you need an AD Group to be created there would be a basic need to have a trigger such as Add\Remove operation.

Let us assume a joiner happens you can develop a native rule to invoke this AD group creation but again if it requires a lot of information or a specific format then you need to add these information as arguments in the provisioning plan and for that you need a before provisioning rule (cloud rule).