Create account instead of modify

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,
I have a target source AB and configured two webservice (A and B) sources for that target source in IDN using the account filtering. The accounts are based on the job title and aggregated into two separate sources. There are some identies that can be in both the sources. When an identity from source A requests the access for source B, instead of modify , create operation is triggered and its getting failed. how to handle this.

2

Hi,

As the account is not already available for the user in IDN for source2 It will definitely try to create account.

Can you elaborate more on usecase?

Somehow you can handle it via rule.

-Abhinov

3

Hi @kani

Ya, this is a common use case but not that highly used in real-time.

Since you don’t have account already in IDN for that source, so by default it will be create account only.

  • Develop a WSBO (Webservice Before Operation Rule) for Create Account operation.
  • You need to check if account already exists or not in your target application
  • How do you check if account already there or not ? You don’t need to develop code for that, Get-Object operation will be enough.
  • If it is not there then no change, create operation
  • If account is there then you need to change your request end point.

Cheers
Krish

1 Like
4

Hi @abinov,
Identity ABC is having an source A and in the target system AB. If ABC requests access from Source B. Error will say " email already exist" . Becase both the sources are from the target same source. Provisioning from both the source A and B will trigger in target system AB. Account filter based on job is used create these two sources . Can we check the attribute value of job and change the create operation to modify?

5

Hi,

Yes in before operation rule you can check if the account exists on target and change the baseURL in the rule.

-Abhinov

6

@kani You can use a before operation rule to tap on operation type and check the account if available or not and based on that change the operation type.

type accountRequest.setOperation(AccountRequest.Operation.modify)or paste code here
1 Like
7

Hi all,
Is there any way to this without Before Operation Rule. There is configuration parameter skipGetObjectINCreate. Can we do something with this. What is the purpose of this attribute

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.