Correlating an Identity

Hello Everyone, I have a question about account management, specifically regarding the correlation between two accounts. If there is a change made to an attribute (such as the end date) of the primary account, will the attributes of the correlated account also be updated accordingly?

I tried it on Sandbox I tried it on Sandbox, but unfortunately, it didn’t work.

Hi @HasibSaifi ,

Correlation is between account and identity. We are correlating accounts with identity based on the correlation logic we define. If the end date is getting changed in Identity, it will not change in correlated account.

You can leverage the use of attribute sync to make sure changes in identity attribute value will get changed for target accounts. Attribute sync can be done only for identity attributes that we use while creation accounts

2 Likes

HI @JackSparrow

Thank you for the quick response, is there any way i could correlate the Identitys? so that there Expiration Date also syncs with the main identity?

THanks

1 Like

Hi @HasibSaifi

Use your correlation logic as it is and create one more enddate attribute which will store updated value and as suggested by theja.

keep this attribute on sync.

Thank you!

2 Likes

Hello @HasibSaifi ,

Correlation is used to map the target source account to existing identities (created with auth source).
What you’re trying to achieve is not possible with correlation.
@JackSparrow is right, you need to use attribute sync to update the end date value on target source.
To do this you’ll need to have an identity attribute (with the desired value obtained from the auth source), configure attribute sync on the target source, select “end date” account attribute you want to update with the identity attribute value.

Check the documentation for more details: Synchronizing Attributes - SailPoint Identity Services

-Mehul

2 Likes

Thank You Mehul

I will check try this out :wink:

Thank you for your suggestions and guidence, it worked with Attribute sync

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.