I have integrated a web service connector in IDN and during account creation in target source I am able to provision the account and see the entitlements tab with entitlements inside the account (in sailpoint idn) however after aggregation inside entitlement assignment tab entitlement is no longer showing
I can see the same entitlement in target source.
Note: there is no api call which can fetch both user details and group which user has.
Kindly assist how can I integrate inside connector so that I can see the entitlements after aggregation.
hi @FaizullahShaik, that is the expected behaviour if you have not configured your account aggregation operation to fetch the entitlements also. You are seeing them till the point accout aggregation is run because SailPoint has provisioned the access and the entitlement assignment is completed.
If you do not have an API call to get both user and groups assigned to user in single endpoint call you may have other endpoints that will proivde which user has which groups. If you have those endpoints then you can use parent child account aggregation operations in your webservice source and fetch both the user data and entitlement information. A sample is shared in the connector guide here.
Hi @udayputta thanks for the assistance now i made some progress, after running single account I have added it as a parent endpoint into roles assigned to users now I can see the groups inside the account even after doing full account aggregation but still there is some issue that I cannot add full accounts aggregation into child one as its giving me an error
Hey to call account id in your child operation you have to use like this “$response.id$”. If “id” is your account id in the schema. Mostly it should be similar to your single account aggregation operations. If you are still facing the problem you can share the operations Json to look at it once.
