Fetch Values from Active Authoritative Account

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,

In our system, there are some users who have 2 authoritative accounts, one in disabled state and another in enabled state.

How to pick value from active account? We already have a transform in place but it picks from disabled account also.

Thank You
Pooja

2

I can suggest to modify a transform to pick values only from active accounts when a user has multiple authoritative accounts, you can use the “accountPropertyFilter” attribute in your transform configuration. as per sailpoint documentation here is the explanation:

  • accountPropertyFilter is filtering the accounts to look at only active accounts. Terminated accounts will not appear (assuming there are no data issues).
    here is the very good reference please:
    Account attribute | SailPoint Developer Community
3

Hi @HussainshaSyed001 We have to fetch disabled accounts and hence can’t use the accountPropertyFilter. Is there any other option

Thanks
Pooja

4

then you can use “accountFilter” in transforms and additinally you can use the accountSortAttribute and accountSortDescending as well, it can help ensure that enabled accounts are prioritized if that is what you are looking. again you can see the same document as given:

5

@poojakumari85 - ```
I have debugged the issue, referring to multiple documents and taking input from the Harbor Pilot

In this link, you can find all information.

to save your time, I am sharing information which I have gathered.
for active accounts, you may want to consider the following attributes to further refine your transform:

accountSortAttribute: This determines the ordering of returned accounts when there are multiple entries. You could set this to “created” to sort by creation date.

accountSortDescending: Set this to true if you want to sort in descending order (e.g., newest accounts first).

accountReturnFirstLink: Set this to true if you want to return the value from the first account in the filtered and sorted list, even if it’s null.

Here’s an example of a more complete transform configuration that incorporates these elements:

{
“attributes”: {
“sourceName”: “Your Authoritative Source”,
“attributeName”: “DesiredAttribute”,
“accountSortAttribute”: “created”,
“accountSortDescending”: true,
“accountReturnFirstLink”: true,
“accountPropertyFilter”: “(status == "active")”
},
“type”: “accountAttribute”,
“name”: “Active Account Attribute Transform”
}
This configuration will filter for active accounts, sort them by creation date (newest first), and return the desired attribute from the first active account in the list```