Fetch identity attribute values using "getReferenceIdentityAttribute"

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi All,

Is there any way to get identity attribute values using operation “getReferenceIdentityAttribute” with ADSamaccountname as input.

We have a requirement where only managers NTID/sAMAccountName is available under Workday source (authoritative) and we have to populate that account’s identity attribute values (FirstName, Last Name). Is there any other way to meet this requirement.

If we give “uid” as an employeenumber the below transform works but with “uid” as NTID or sAMAccountName its not fetching values

Tried below transform variations but none of them returning values

  1. {
    “name”: “Determine FirstName using an Account Name”,
    “type”: “rule”,
    “attributes”: {
    “attributeName”: “firstname”,
    “name”: “Cloud Services Deployment Utility”,
    “operation”: “getReferenceIdentityAttribute”,
    “uid”: “primaryAdminNtid”
    },
    “internal”: false
    }

  2. {
    “name”: “Determine FirstName using an Account Name”,
    “type”: “rule”,
    “attributes”: {
    “attributeName”: “firstname”,
    “name”: “Cloud Services Deployment Utility”,
    “operation”: “getReferenceIdentityAttribute”,
    “uid”: {
    “type”: “accountAttribute”,
    “attributes”: {
    “sourceName”: “Active Directory”,
    “attributeName”: “sAMAccountName”
    }
    }
    },
    “internal”: false
    }

{
“name”: “Determine FirstName using an Account Name”,
“type”: “rule”,
“attributes”: {
“uid”: {
“input”: {
“attributes”: {
“attributeName”: “sAMAccountName”,
“sourceName”: “Active Directory”
},
“type”: “accountAttribute”
}
},
“attributeName”: “firstname”,
“name”: “Cloud Services Deployment Utility”,
“operation”: “getReferenceIdentityAttribute”
},
“internal”: false
}

2

Hi Sruthi Chandran, Welcome to the Developer community!

The uid is a SailPoint username value of an identity, so it will not return you the result when you pass the account attribute value to uid. If you want to populate the manager’s identity attribute value in their subordinate identities, you can use the below transform and make sure you have configured the manager correlation in your Workday source.

  "attributes": {
    "name": "Cloud Services Deployment Utility",
    "operation": "getReferenceIdentityAttribute",
    "uid": "manager",
    "attributeName": "firstname"
  },
  "type": "rule",
  "name": "Get Reference Identity Attribute Transform"
}
3

We have used “uid”: “manager” and its working and looking for options to fetch similar result using account attribute NTID