Hello Community, I am trying to test the creation of an account on a WEB Application i configured the test connection,account aggregation and create an account operations And on the identityProfile on the active state i added on the Enable Tab my Source But when i refresh an identity to test the …

[image] torry_salamat: added on the Enable Tab my Source This will not create an account. This is to enable an account only if it already exists. You need to set up a birth right role with an entitlement from the source to trigger the create account process

Hello Nithesh, Thank you for your answer, Are there any ways to tell ISC to create the account without using the entitlements?

Hi Torry, If this is a birthright access to every user then you may configure a Role with matching criteria to assign the access from this source and eventually trigger create account operation. If you are just testing if create account is working then you need make one of the access from this sour…

Thank you for your answers @udayputta @sauvee , I have a special entitlement usecase : I have this attibute called role but there’s no specific endpoint to get it the only way to get it is in the account itself because it’s within reach with a GET USERS : When you do a GET USERS you’ll get the sp…

I’ve seen this use case in the past as well. It’s easiest to create a dummy user in the target system that has ALL entitlements that are available in the system. Then create a group aggregation operation that gets this single user and pull off all entitlements from the user.

Hello Edwin, Thanks again for answering, I am just trying to aggregate only one entitlement for now just to test but it doesn’t seem to work for me am i missing a step?

Can you share the raw response as well as your configured response mapping + schema? That way it’s easier to check what might be the issue.

Hello Back Edwin, It worked i think it was a cache problem, Thanks for the help

Creating an Account WEBSERVICES

SailPoint Human Fabric (SHF) SHF Discussion and Questions

sauvee (Edwin Sauve) September 3, 2025, 3:32pm 5

You have to trigger creation from an entitlement being assigned. With a webservices connector however you can setup a ‘dummy’ entitlement and trigger creation based on that (ignoring the dummy entitlement in provisioning).

Check this topic for inspiration:

Topic		Replies	Views
Unable to add entitlement to access profile and run create account web service http operation SHF Discussion and Questions webservice-connector , identity-security-cloud	6	619	July 4, 2024
How do I provision accounts to a Web Services source without entitlements? SHF Discussion and Questions webservice-connector , identity-security-cloud , provisioning	3	1594	December 21, 2023
How do you provisiong if you can't use Roles/AP/Entitlements? SHF Discussion and Questions webservice-connector , identity-security-cloud , provisioning	5	607	November 1, 2023
ISC Webservice HTTP operation account created but entitlement not added SHF Discussion and Questions webservice-connector , identity-security-cloud , provisioning	12	615	November 25, 2024
How to provision a webservice account that are no entitlement SHF Discussion and Questions identity-security-cloud	1	636	March 14, 2024

Creating an Account WEBSERVICES

Related topics