Configure “SailPoint Non-Employee Risk Management” source to exclude Prehire identities

SailPoint Human Fabric (SHF) SHF Discussion and Questions
,
1

Hello, good afternoon.

I would like to know whether it is possible to configure the “SailPoint Non-Employee Risk Management” connector/source so that it reads accounts in Active and Inactive status, while excluding accounts in Prehire status.

Currently, in the source configuration, I can only see the options Active or All.

The customer requirement is to read all NERM accounts except those that are in Prehire status.

Is there any way to adjust this behavior directly from the source configuration? If this is not possible through the UI, can this logic be modified through Visual Studio or any other advanced connector configuration?

Thank you very much.

image
image349×127 3.55 KB

image
image1273×304 15.9 KB

2

IN VS CODE USE THESE FILTER “profileStatus”: “Active OR INACTIVE”

“profileStatus”: “Inactive|active”

3

Hi @MichaelCastillo7 you might need to use custom webservice connector then to achieve this .

Second approach can be to handle the lifecycle in SailPoint itself and control the user access

4

Hello María. Based on the current NERM connector documentation, the native source filter only supports All or Active. Active includes Active and On Leave profiles, while more granular status combinations are not currently supported.

I would therefore not recommend using undocumented values such as Active|Inactive in profileStatus.

As SHANTANU CHATTOPADHYAY mentioned, a custom integration may be an option if excluding Prehire during aggregation is mandatory, but I would first confirm that Prehire can be filtered through the NERM API in your tenant.

There is also an existing Profile Status filtering enhancement thread where SailPoint has acknowledged requests for more granular filtering.