Help me how can i generate a unique email address from the data coming from workday . i made one concat trasnform to generate but it doesnt have a unique counter pl help

Identity Security Cloud (ISC) ISC Discussion and Questions
1

below is my transform for mail generation

{
    "id": "90c9c4c8-d117-4023-a037-00ce0633e3f2",
    "name": "DOW_EMAIL_GENERATION_WD",
    "type": "concat",
    "attributes": {
        "values": [
            {
                "type": "identityAttribute",
                "attributes": {
                    "name": "inititalforaddisplayname"
                }
            },
            {
                "type": "identityAttribute",
                "attributes": {
                    "name": "lname"
                }
            },
            "@",
            {
                "type": "identityAttribute",
                "attributes": {
                    "name": "domainbasedontenant"
                }
            }
        ]
    },
    "internal": false
}```
2

@Rakesh_Singh_1234 -

Is this transform intended for an Identity Profile mapping or a Create Account profile?

If you’re working with a Create Account profile, you can utilize the “Create Unique LDAP Attribute” generator to create unique account attributes beyond just the username.

To configure this, go to the “Create Account” configuration page of your source and set up the email attribute accordingly.

Make sure your Identity Profile includes an attribute that extracts the first initial of the user’s first name — this will be essential for building your desired pattern.

image
image1380×534 35.4 KB

But if it for Identity Profile Mapping then You would need a custom rule to make that work in an identity profile mapping.

https://developer.sailpoint.com/idn/docs/rules/cloud-rules

Hope this helps.

1 Like
3

@officialamitguptaa hey amit we are making at ideentity profile level and then mapping it in downstream app create account(like AD ) for that can it be done through a transform by adding a unique identitifier in trasnform itself>??

4

Have a look at this one

5

@Rakesh_Singh_1234 -

I have attached a sample. Let me know if it works

{
    "name": "email_Generator",
    "transform": {
      "type": "usernameGenerator",
      "attributes": {
        "sourceCheck": true,
        "patterns": [
          "$initials.$ln@$domain",
          "$initials.$ln.${uniqueCounter}@$domain"
        ],
        "initials": {
          "type": "identityAttribute",
          "attributes": {
            "name": "inititalforaddisplayname"
          }
        },
        "ln": {
          "type": "identityAttribute",
          "attributes": {
            "name": "lname"
          }
        },
        "domain": {
          "type": "identityAttribute",
          "attributes": {
            "name": "domainbasedontenant"
          }
        }
      }
    },
    "attributes": {
      "cloudMaxSize": "100",
      "cloudMaxUniqueChecks": "5",
      "cloudRequired": "true"
    },
    "isRequired": false,
    "type": "string",
    "isMultiValued": false
  }

Thank you!

6

hey thanks @officialamitguptaa but my question is can i directly apply this at identity profile level?

7

image
image1313×898 100 KB

@officialamitguptaa giving me errror

8

@Rakesh_Singh_1234 -

You need to delete the old one first and then create this one. If you are modifying the existing one, make sure to keep the same name,id etc. Just update the logic.

9

In addition to what @officialamitguptaa mentioned, you cannot change the root transform type once it’s created

10

@officialamitguptaa i am not able to save it showing error .can we use the transfrom only in provisioning policy?

11

@officialamitguptaa i got an error when i applied this transform in prov policy of ad

An unexpected error occurred: Unable to generate a unique value for ‘118112’, action UniqueAccountIdValidator[[email protected],app=Active Directory] is not retry-able due to ConnectorException: [ InvalidConfigurationException ] [ Error details ] Required string attribute ‘User’ is not defined.It must have a valid value.