Delimited File Connector - Complex Logic

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Experts!

I have a requirement where my authoritative source is a delimited file connector and within the CSV file that will be uploaded, it might contain 2 different rows for a single identity. With that, we need to be able to identify the 2 rows and according to the “action” column, determine if I’m supposed provision this user in ISC tenant. Would this be doable? If so, how should i go about doing it?

Appreciate any inputs regarding this, thank you!!

2

yes it is. as ISC expect unique record do pre-process of data before aggregating csv using powershell or python by which multiple per user combined as single user.
a) Read all rows
b) group by unique value
c) check action column to determine to provision
second method
you can have custom transform that check action provisionable
but pre-processing data is good one

3

Hi Hussainssha,

For the second method, since I would now know which row comes in first (i.e. ‘Update’ action could be aggregated in before ‘Create’ action), how should i even use custom transform to check if action is provisionable?

4

Hello @mingsiewang ,

Did ou try to use a powerhsell script to modify the file and upload it using the file upload utility?

It can be great for elimited file connectors.

Regards,
Pablo

1 Like
5

I could suggest following..

  1. Make the “Action” attribute as multivalued in Schema.
  2. Add a condition in birthright provisioning role, account attribute “Action” contains “”
  3. Making the attribute multivalued merges the 2 rows of same record in the ISC, and birthright role condition ensures that only when the Action atribute comes with the expected value, provisioning of Birthright role happens, accordingly you can provision AD account.