Entra-ID Provisioning Manager Field

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi everyone, I got stuck on provisioning for new user Entra account for manager mapping, basically we are looking for fetching manager data from Identity data which we can map inside the manager field while provisioning.

Does anybody have any other way to get this done???

3

Hi @LearningStar,

You can make use of the reference identity attribute transform to pull the user’s manager details.

You will first need to create an Identity attribute (eg. entraUpn) that holds the UPN value from Entra ID. Then use the reference transform to fetch the manager’s entraUpn.

The final transform would look something like this :

{
  "attributes": {
    "name": "Cloud Services Deployment Utility",
    "operation": "getReferenceIdentityAttribute",
    "uid": "manager",
    "attributeName": "entraUpn"
  },
  "type": "rule",
  "name": "Get Reference Identity Attribute Transform"
}
4

@jesvin90 thanks a lot for sharing your knowledge and guidance, it worked!
I was using static transform to fetch $identity.getManager().getAttribute(‘name’), it was throwing error since this value doesn’t exist I believe but with this reference transform it is able to pick the correct values.

5

Ideally something like this should also work :

{
  "type": "firstValid",
  "attributes": {
    "values": [
      "$identity.getManager().getStringAttribute('entraUpn')",
      "no manager exists"
    ]
  }
}

Take a look at this doc.