Exporting DelimitedFile Application into an AD Application

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

I’m currently using a Delimited file application that receives information through a CSV file with the objective of passing that data onto a AD. To do that in Identity configuration I created an with the variable, where the is the Delimited file application plus a rule to validate the values and the is the AD application plus another rule to validate the results.
Still, somehow when I import the CSV file onto the Delimited file application there are no changes in the AD application.
How would I be able to import values via CSV onto an AD?

Hi João Rodrigues,
Is the Delimited file application that receives information through a CSV your authoritative application? do you require to create account on AD based on your CSV?..can you explain more

Hello, thx for the quick reply!
The Delimited File app is not an authoritative app. It is just an app used as a means to export specific variables into the AD through a csv file.
My question is less about my specific case, but in general, if I would want to use a delimited file app to send values of specific variables to a AD-Direct app what would the process look like?

Hi @joaovrodrigues ,

It is possible to push the value from one application to another application via attribute sync. But are the value from the delimited file are Identity attributes? If yes, use Identity mapping and make the delimited application as the source and AD as target.

Select the appropriate attribute from the source application and map it to the corresponding attribute you wanna sync in Target application.

Note:
Select synchronize attribute in Identity refresh to trigger the changes

3 Likes

Refer this link for Attribute sync:

https://community.sailpoint.com/t5/IdentityNow-Articles/Best-Practices-Attribute-Sync/ta-p/77801

1 Like

My current issue resides there. I’m currently using Identity mapping to make the delimited application as the source and AD as target for the attribute, but it is somehow not working.

Hi @joaovrodrigues,

Welcome to the SailPoint Developer Forum!

Are you triggering the attribute sync?

There are two ways of trigger, You’d have to follow the second option of aggregation

  • Direct Edit to an Identity – editing the identity directly in the UI, in the Identity Warehouse’s View Identity Page or the Edit Identity quicklink. These changes cause the system to immediately process the synchronization. Note that there may be an approval step required for the change, before the synchronization will occur.

  • Aggregation – when an attribute change comes through aggregation, attribute synchronization is initiated through a refresh task that has the Synchronize Attributes option selected.

1 Like

Refer to this resource of Attribute Synchronization

https://documentation.sailpoint.com/identityiq/help/provisioning/attributesynchronization.html

1 Like

Sorry for the late reply.
With Identity Attributes that have the advanced option “Attribute Sync” should the aggregation of the application in the “AttributeSource” not be enough to provision the updates to the application in the “AttributeTarget”?
image

I am able to change the variable value in the sailpoint default quicklink “Edit Identity”, and those changes are reflected in the AD, but when I try to make those changes through the DelimitedFile Application, nothing is modified in the AD (both in its sailpoint application and the actual AD).

Hi @joaovrodrigues ,

If I am understanding your issue correctly, when you are performing changes in the delimited file, changes are not reflecting in sailpoint?

If so, check if an identity attribute for the value you wanna read from delimited file is created in Identity mapping. Once the Identity mapping is done, run a aggregation job and refresh job.

If you have trouble in viewing that newly created identity attribute in Identity Cube:
Go to Debug page> config objects > UI config> search for IdentityViewAtrributes and add the identity attribute name you want to display in identity cube.

Then check if the value is populated in the Identity Cube.

Once it is able to populate into SailPoint. Then populating it into AD will be done once the refresh job with sync attribute option is trigged.

Note:
Add Target as AD application in Identity Mapping before Refresh Identity task

Let me know if that works and Kindly mark it as solution

3 Likes

I finally managed to make the changes in the AD, after running a refresh task for the test identity with the Synchronize Attributes and Refresh identity attributes activated, is it possible to create a rule that refreshes the changed values or just refreshes all values. Is there another way to pass identity changes from the delimitedFile app to the AD app without needing to refresh the identities?

I dont think so, but have you considered optimizing the refresh task if its the performance you’re worried about?

https://documentation.sailpoint.com/identityiq/help/tasks/deltaidentityrefresh.html

1 Like

Seems like a good idea :grinning:.
How wouId I be able to create a task including identities of the delimitedFiles app that is able to have the option “Synchronize Attributes” (only included in identity refresh task)?
In other words, I would like to aggregate identities to the delimitedFile app and refresh those same identities to pass the new values onto the AD app.

Try using this optional filter here:

links.application.name == “[delimited app name]”

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.