Create Entitlements for the Nested Groups

[PrashRV (Prashanth RV)]

Hi,

how can i create entitlements from Nestedgroups while running group aggregation, the application SCIM based.
Note : the group aggregation is creating entitlements only for parent ones now in the nested groups not for child ones.

Any help/suggestion provided appreciated.

Thanks
Prashanth

[sidharth_tarlapally (TARLAPALLY SIDHARTH)]

Hello @PrashRV , as you mentioned that it SCIM based , it shall follow the standard which should give you response in the following way .

{
  "schemas": ["urn:ietf:params:scim:schemas:core:2.0:Group"],
  "id":"e9e30dba-f08f-4109-8486-d5c6a331660a",
  "displayName": "Sales Reps",
  "members":[
    {
      "value": "2819c223-7f76-453a-919d-413861904646",
      "$ref": "https://example.com/v2/Users/2819c223-7f76-453a-919d-413861904646",
      "display": "Dwight Schrute"
    },
    {
      "value": "902c246b-6245-4190-8e05-00816be7344a",
      "$ref": "https://example.com/v2/Users/902c246b-6245-4190-8e05-00816be7344a",
      "display": "Jim Halpert"
    }
  ],
  "meta": {
    "resourceType": "Group",
    "created": "2010-01-23T04:56:22Z",
    "lastModified": "2011-05-13T04:42:34Z",
    "version": "W\/\"3694e05e9dff592\"",
    "location": "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a331660a"
  }
}

If this is not how the response is present , this is a non-compliant SCIM Server.
Enable non-compliant server :

See if you can map the entitlement attributes with your json path that you wish you to include.

Refer to Non Compliant Settings for SCIM and SCIM Official Site for more information.

Thank you!

[PrashRV (Prashanth RV)]

HI Siddarth,

thanks for your reply, the application I am working on is SCIM compliant one, and the same way the data represents as you mentioned above .

is there any way we could achieve that…?

Thanks
Prashanth

[sidharth_tarlapally (TARLAPALLY SIDHARTH)]

Hey @PrashRV , I understood your requirement . But this isn’t possible , The members attribute in the response is the data which tells who are all the users that belong to the group which means they are not groups / entitlements .Since SCIM is a standard protocol it does not read members attribute for entitlement aggregation . This can still be achieved using web service connector and writing an after rule for entitlement aggregation operation.

Thank you