Creating a correlation rule from another rule with application object

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi all

I am creating an application using application builder and trying to set the correlation using a rule

I dont have anything else other than application object and schema attribute

How do I get the account or link object from a rule and connect it with application object using the rule ?

Thank you

2

Hi @mgupta403,

into the rule you the argument link where is stored the account. The rule must return an identity or an identity name; you must search the identity that you want and return it, with context.search() for example.

1 Like
3

Hi @mgupta403 ,

Account, link are input argument for correlation type rule. Please refer the example correlation rule.

<Rule language='beanshell' name='Example Identity Email Correlation Rule'
      type='Correlation'>
  <Description>
   In this example we are going to use the new account's
   email address to try and locate an existing Identity
   to hang the new account from. This rule uses the email attribute
   on the identity object to attempt to find an owner
   for the incoming link.
  </Description>
  <Signature returnType='Map'>
    <Inputs>
      <Argument name='context'>
        <Description>
          A sailpoint.api.SailPointContext object that can be used to
          query the database to aid in correlation.
        </Description>
      </Argument>
      <Argument name='environment' type='Map'>
        <Description>
          Arguments passed to the aggregation task.
        </Description>
      </Argument>
      <Argument name='application'>
        <Description>
          Application being aggregated.
        </Description>
      </Argument>
      <Argument name='account'>
        <Description>
          A sailpoint.object.ResourceObject returned from the
          collector.
        </Description>
      </Argument>
      <Argument name='link'>
        <Description>
          Existing link to this account.
        </Description>
      </Argument>
    </Inputs>
    <Returns>
      <Argument name='identityName'>
        <Description>
          The name of an Identity object.
        </Description>
      </Argument>
      <Argument name='identity'>
        <Description>
          A fully resolved Identity object if the rule wants
          to do its own queries.
        </Description>
      </Argument>
      <Argument name='identityAttributeName'>
        <Description>
          The name of the extended attribute that can be used
          to locate an existing identity.
        </Description>
      </Argument>
      <Argument name='identityAttributeValue'>
        <Description>
          The value of the named extended attribute that can be used
          to locate an existing identity. This attribute is used
          together with the identityAttributeName argument.
        </Description>
      </Argument>
    </Returns>
  </Signature>
  <Source>
    <![CDATA[
    Map returnMap = new HashMap();

    String email = account.getStringAttribute("email");
    if ( email != null ) {
        returnMap.put("identityAttributeName", "email");
        returnMap.put("identityAttributeValue", email);
    }
    return returnMap;
    ]]>
  </Source>
</Rule>
1 Like
4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.