Extended Column in Certification

[Amsingh1 (Amandeep Singh)]

Hi Folks,

Just a query, Is there a possibility that during access reviews the identity status i.e. inactive or active can be shown to the reviewer as a column. If yes then how can it be done. For Identity Status we have a identity attribute called Inactive which is populated based on Successfactors. So can we show the identity status during certifications to the reviewer.

[kalyan_dev32 (Pavankalyan Dosa)]

Hi @Amsingh1 ,

yes, you can show your identity status during access reviews by extending the grid to display additional identity attributes as certification column, either by directly mapping the identity attribute in UIConfig or via a rule.

thanks

[Amsingh1 (Amandeep Singh)]

How can we directly map identity attribute in UI config, can you give the steps or snippet.

[kalyan_dev32 (Pavankalyan Dosa)]

In my case, I used Targeted Certification and was able to display the identity status by adding this ColumnConfig to every key that starts with uiTargetedCertificationItem in the UI config:

<ColumnConfig dataIndex="inactive" groupProperty="Identity.inactive" headerKey="inactive" hideable="true" property="Identity.inactive" sortProperty="Identity.inactive" sortable="true" stateId="inactive"/>

If this approach doesn’t work in your case, check below threads:

Adding new Columns to Targeted Certification

@maniG Did you add the helpText attribute to the ObjectConfig as shown below? To make this work, I’m assuming you’ve already extended the schema by adding the helpText attribute to the Link and CertificationItem hbm files. After that, you’d need to update the ObjectConfig with namedColumn="true", like this: <?xml version='1.0' encoding='UTF-8'?> <!DOCTYPE ObjectConfig PUBLIC "sailpoint.dtd" "sailpoint.dtd"> <ObjectConfig name="CertificationItem"> <ObjectAttribute displayName="Help Text" editMo…

Adding new Columns to Targeted Certification

did you added the ColumnConfig in all the keys starts with uiTargetedCertificationItem in the UIConfig object? To see the value in the certification, Once you schedule the certification campaign. go to debug and open certification definition of the campaign which you have created recently. and add the <entry key="certificationItemCustomizationRule" value="Your Rule Name"/>

thanks

[Amsingh1 (Amandeep Singh)]

Just a query where you said identity.inactive there do we need to mention whatever is present in identity mapping?

Below is the Screenshot for the identity mapping for this in our system.

[kalyan_dev32 (Pavankalyan Dosa)]

@kalyan_dev32

adding this ColumnConfig to every key that starts with uiTargetedCertificationItem in the UI config

Add it in UIConfig object.

[Amsingh1 (Amandeep Singh)]

@kalyan_dev32

<ColumnConfig dataIndex="inactive" groupProperty="Identity.inactive" headerKey="inactive" hideable="true" property="Identity.inactive" sortProperty="Identity.inactive" sortable="true" stateId="inactive"/>

this one right like as it is and to all the places where uitargetedcertificationitem is there

[kalyan_dev32 (Pavankalyan Dosa)]

yes, that’s correct. i guess this only works in case of Targeted Certification. if you’re using different type write a add entries in Hbm files and write a rule.