Display ISC manager information to NERM

SailPoint Human Fabric (SHF) SHF Discussion and Questions
, ,
1

Hi ISC Users

I need to pull ISC manager name/manager number in NERM. Here the requirement is to populate manager information in NERM form to select manager during NERM user onboarding.

I tried one approach by creating a REST API workflow call in the NERM form but unable to execute the workflow.

Appreciate your support.

Thanks

2

Also, he will be the manager, right? If yes, we have created a new connector in ISC for NERM Manager, aggregated the roles, and assigned the NERM Manager role — so every ISC manager will automatically receive the NERM Manager role.

3

Hi @chaithu979

Thank you for for your response.

yes he will be the manager. I have already configured the connector in ISC to pull NERM accounts attributes.

Our requirement is to set manager in the NERM form before we run the aggregation in ISC. For that we need to pull ISC managers info from ISC-> NERM .

Can you please share your inputs?

Thanks once again.

4

Hi @mananbhavsar7 :

To implement this requirement , you can use multiple ways :

  1. write a powershell script and push data to NERM , you can use API below to add manager to user , for this you need to first know uuid of both user as well as manager object

image
image1398×832 45.5 KB

  1. second option to automate this via ISC - NERM integration

Step1 :

In ISC create a source which:

· Creates new users in NERM

· Aggregates users and NERM User – User Role membership in ISC

· Updates users in NERM

· Disable /enable user in NERM, based on status change in ISC

· Add or remove role in NERM, based on update in Role in ISC

step 2:

create workflow as below in ISC, this checks:

a) if a NERM user is created in NERM via source , based on birthright role

b) The system retrieves the full identity profile, all attributes

c) Verify Manager Assignment Criteria

The system checks for two required conditions:

  1.     nermManagerId attribute is present.

  2.     The NERM user record exists.

· If both conditions are met:
→ The NERM user is updated with the specified Manager ID.

· If either is missing:
→ The process fails gracefully and logs an error.

image
image386×378 24.7 KB

  1. There is new functionality going to get released in few days , worth waiting , OOb connector for users is going to be released , https://community.sailpoint.com/t5/Identity-Security-Cloud-Updates/Announcement-Updates-to-Non-Employee-Risk-Management-User/ba-p/273849
5

By “manager information,” I mean that I want to display all accounts from ISC where isManager = true and sync them from NERM to ISC. Manager name wil be decided at the time of contractor onboarding.

Please suggest your inputs.

6

Steps for Creating NERM Users (Initial Setup + Ongoing Onboarding)

1. Initial User Creation in NERM

For the first-time bulk creation of users in NERM, you may:

  • Import a CSV file, or

  • Use an automated PS script.

After the initial setup, new users will be created automatically using the steps below.

2. Set Up the NERM Manager Role in ISC

  1. Create a Business Role

    • In ISC, create a business role called NERM Manager (you may choose a different name ).

  2. Configure Assignment Criteria

    • Add an assignment condition:
      isManager = yes

  3. Add Entitlement / Entra Group

    • Assign the Entra group or entitlement that corresponds to the NERM Manager user role.

With this configuration, whenever a new internal user is created and their identity has isManager = yes, the system will automatically create the user in NERM based on above config.

3. Configure the Corresponding Role in NERM

  1. In NERM, create a user role with the same name as the one created in ISC.

  2. Associate the same Entra group with this NERM role.

This ensures after authentication the user will have appropriate permissions assigned in NERM .

  • Any user with the manager flag (isManager = yes) will:

    • Be automatically created in NERM, and

    • Receive the NERM Manager user role.

4. Contractor Onboarding Form :

  • In your contractor onboarding form, add the attribute Contributor Type.

  • grant permissions to this attribute with the NERM Manager user role, all NERM managers only will be listed in that attribute.