Extending certification access review columns to display additional identity attributes

IdentityIQ (IIQ) IIQ Discussion and Questions
1

I need to add a new column to certifications. For example, we have created two separate Manager Certification campaigns: ManagerOne and ManagerTwo.

Our requirement is to add a new column only to ManagerOne, without affecting ManagerTwo or any other certification types.

Is there a way to achieve this? Please help.

2

Adding a new column to certifications can be done with custom evaluators, but it’s per type, not per campaign/instance. So if you added a new column per manager certifications, it would show for all types.

You could always either:

  1. Leave the column value blank (or N/A, dash, etc) for campaigns you did not want it to affect (i.e. ManagerTwo in your example)
  2. Use a custom plugin to modify the UI to hide this custom column for non-supported campaigns

Alternatively you could achieve this entirely with a custom plugin avoiding the custom renderer if you wanted to package it all in one plugin.

More on custom evaluators: certificationAccessReviewsTableColumns - add an identity attribute as a column - #2 by robert-hails

Hope this helps!

3

Hello @Maruthikumar,

This is practically not possible as for SailPoint manager access review is same for every other manager and campaign, mostly in the campaigns the applications, names and certain configurable items keeps on changing so you can’t restrict the column behaviors based on such attributes as whatever is ManagerOne today I guess it is a name of champaign which will definitely change with the next champaign so there is no control or approach to achieve this.

You can have something like blank value and with some values wherever it is applicable.

Thanks.

4

It is not possible to add additinal column only in single certificate. If we add, it will reflect all the certificaions.

5

@Maruthikumar Columns are generic to certification, if you add it then it’ll be available for all certification. But you can try populating the values using CertificationItemCustomization. Using this you can set the values for one cert while for other you can leave it blank.