# Disable Default Correlation Rule

**URL:** <https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558>\
**Category:** SHF Discussion and Questions\
**Tags:** correlation, aggregation, sailpoint-identity-security\
**Created:** [January 16, 2023, 1:57pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558 "2023-01-16T13:57:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [January 16, 2023, 1:57pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558/1 "2023-01-16T13:57:47Z")

</div>

Hi,

As we all know there is a Default correlation Rule withe Account Name and the Name attribute from the Identity. My question is, there is a way to disable this default correlation?

Me case is that we are using the Account Name as the full name from the Authoritative Source, so when a user is disable and is created again for a hiring process or something similar, IDN did not create a new Identity just correlates to the existing one.

Regards

---

<div class="post-metadata">

**Author:** ![kenilelk1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kenilelk1/32/259_2.png) [@kenilelk1](https://developer.sailpoint.com/discuss/u/kenilelk1)\
**Post date:** [January 16, 2023, 11:09pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558/3 "2023-01-16T23:09:12Z")

</div>

Asking the same question via the Support case last year we were told the only chance to overwrite that back end ‘default correlation’, a ‘real hell’ within a switching of the autoritative sources we did, at IDN is to use a custom correlation cloud executed rule. We never tested it but will be happy to know whether it is true or not, and find a Rule sample that does it…

---

<div class="post-metadata">

**Author:** ![fmunerato](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/fmunerato/32/6029_2.png) [@fmunerato](https://developer.sailpoint.com/discuss/u/fmunerato)\
**Post date:** [January 19, 2023, 7:31pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558/4 "2023-01-19T19:31:24Z")

</div>

> [@kenilelk1](#):
>
> sking the same question via the Support case last year we were told the only chance to overwrite that back end ‘default correlation’, a ‘real hell’ within a switching of the autoritative sources we did, at IDN is to use a custom correlation cloud executed rule. We never te

So with this response in my understanding, we can only remove this default correlation rule if we deploy a new correlation rule via ES? 😕

---

<div class="post-metadata">

**Author:** ![kenilelk1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kenilelk1/32/259_2.png) [@kenilelk1](https://developer.sailpoint.com/discuss/u/kenilelk1)\
**Post date:** [January 20, 2023, 7:04pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558/5 "2023-01-20T19:04:55Z")

</div>

Hi Felipe,

My understanding that is not possible to switch off the 'back end ‘default correlation’ in IDN (or IIQ) . It looks it’s a hard coded heritage of old initial model of IIQ reused in IDN since 2017.

Nevertheless the individual identity mapping could be amended under a tenant request in IDN in a back end XML.

Role, certification and other internal object links to the amended identity cude might disappear after that. We found that case sometimes is protected by using **aliasname** as an additional identity attribute to the user ID, but only for some objects and settings.

Sample of the identity assigned to a Role.

```auto
    {
        "id": "1122334456",
        "name": "AAAABBBBCCC",
        **"aliasName"** : "52017855",
        "email": "AAAABBBBCCC@tenant.com",
        "roleAssignmentSource": "ACCESS_REQUEST"
    }

```

So it is a complex way with an extra job to do a lot of child object link corrections after the identity cube initial mapping change for individual identities with a Sailpoint premium support help, but it does not look like “a mission is impossible”.

> - If IdentityNow is unable to correlate an account to an identity using your configuration, it will attempt to use a default correlation configuration by matching the account attribute marked as `name` to the identity’s `Account Name`. You can find the `Account Name` by clicking the Identity in the Identity List and viewing the `Account Name` in the attributes section.
> - **If you don’t have a custom correlation configuration,** or if your configuration doesn’t find an Identity for an account, IdentityNow automatically attempts to correlate the accounts to Identities by matching the `Account Name` with the Identity’s` Account ID`.

Second way as we interpret the answer above, is to make a complex custom correlation rule that will prevent a back end default correlation to be fired. That is what I would like to see a working sample.

Perhaps the idea would be to define inside the rule own default correlation for all uncorrelared accounts to link them to the same one special ‘helper’ identity we could create.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:24pm UTC](https://developer.sailpoint.com/discuss/t/disable-default-correlation-rule/7558/6 "2023-07-19T14:24:06Z")

</div>


