Which IIQ version are you inquiring about?
8.3p3
Issue with population filter with multi valued attribute. Attempting to create filter for new RSA users with no tokens (multi valued). This will be used for population or policy where active users with no tokens will flagged for provisioning plan for “get next token”
Issue with attempting to create population filter with a multivalued attribute when there are no values. (rsa_token)
Im able to create the reverse filter with NOTNULL, but when I attempt to filter with ISNULL or ISEMPTY, I get no results.
Any help would be appreciated.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE GroupDefinition PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<GroupDefinition indexed="true" name="RSA Test Pop" private="true">
<GroupFilter>
<CompositeFilter operation="AND">
<CompositeFilter operation="AND">
<Filter joinProperty="IdentityExternalAttribute.objectId" operation="JOIN" property="id"/>
<Filter ignoreCase="true" operation="EQ" property="IdentityExternalAttribute.attributeName" value="rsa_token"/>
<Filter operation="ISNULL" property="IdentityExternalAttribute.value"/>
</CompositeFilter>
</CompositeFilter>
</GroupFilter>
<Owner>
<Reference class="sailpoint.object.Identity" name="spadmin"/>
</Owner>
</GroupDefinition>