Creating a Rule

IdentityIQ (6.0) user interface does not have facility to create Native Rule applicable for IQService. Create a rule with any supported type from the user interface. Add the script to the Rule source and save the Rule. Navigate to the debug page, open the newly created Rule and perform the following steps:


This is the companion discussion topic for the documentation at https://documentation.sailpoint.com/connectors/identityiq/active_directory/help/integrating_active_directory/creating_a_rule.html

Documentation mentions to use attributes in the native rules as follows

Name Description Default Value
objectOrientedScript Whether the rule source uses object oriented scripting. False
disabled Set to true if the rule should not be executed on the IQService side. False
extension Extension of the script. .bat
program Program/application that can execute this type of script.

Ensure that this program is installed on the system where IQService is running and i properly configured to execute the scripts.
cmd.exe or cmd
timeout Time interval (in seconds) that IQService should wait for script to return. After this interval, IQService aborts the script. 10

Notice the lowercase ‘o’ documented, where as the connector expects the the key to be written as ObjectOrientedScript (notice the uppercase ‘O’)

Either change the documentation to reflect that or change the connector to handle with lowercase, I think it’s best if case is ignored while checking these keys.

This post followed the documentation which resulted in functionality not working

1 Like