# How can I trigger attribute provisioning from ISC to NERM? **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** nerm, non-employees, sailpoint-identity-security, provisioning\ **Created:** [August 4, 2026, 1:32pm UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062 "2026-08-04T13:32:20Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![MichaelCastillo7](https://avatars.discourse-cdn.com/v4/letter/m/bbce88/32.png) [@MichaelCastillo7](https://developer.sailpoint.com/discuss/u/MichaelCastillo7)\ **Post date:** [August 4, 2026, 1:32pm UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/1 "2026-08-04T13:32:21Z")
Hello everyone, I have a question regarding attribute synchronization from SailPoint Identity Security Cloud to NERM. I created a source in ISC using the **SailPoint Non-Employee Risk Management** source type and enabled provisioning. In NERM, I have an attribute called `samaccountname`. This attribute is also configured in the NERM source schema in ISC, and I enabled it for attribute synchronization. In the ISC identity profile, I also have a `samaccountname` identity attribute whose current value is obtained from Active Directory. What I need is for the `samaccountname` value stored on the identity in ISC to be sent to NERM and update the corresponding non-employee profile attribute. However, I do not understand how to trigger provisioning from ISC to NERM so that this update is performed. Is it possible to automatically provision this attribute from the ISC identity profile to the NERM profile? If so, what configuration, workflow, or action should be used to trigger the synchronization? Thank you in advance. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/c/3/c396d44b63ecc54d2c1a48c7747f2f05b534a342.png) ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/e/bebc02fe4e7d42ff9273af4113ddcfb6689cfee1.png) ![image](https://global.discourse-cdn.com/sailpoint/original/3X/4/e/4e6afcc7d91dce7dff8ea3e9fe23f85ca9893f10.png) ![image](https://global.discourse-cdn.com/sailpoint/original/3X/4/6/467885e85851cf2ed310aacc275d68f36078f47f.png) ---
**Author:** ![Deepak\_Chaudhary](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/deepak_chaudhary/32/34380_2.png) [@Deepak\_Chaudhary](https://developer.sailpoint.com/discuss/u/Deepak_Chaudhary)\ **Post date:** [August 4, 2026, 1:44pm UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/2 "2026-08-04T13:44:58Z")
HI @MichaelCastillo7 Yes, this is possible. You can automatically provision the sAMAccountName attribute from your ISC Identity Profile back to your NERM profile. SailPoint provides native support for Attribute Synchronization with the Non-Employee Risk Management source, allowing attributes to be synchronized automatically between ISC and NERM. Please refer to the new capability documentation provided below for detailed steps. > [@New Capability: Non-Employee Risk Management Sources now support Attribute Sync from Identity Security Cloud](https://developer.sailpoint.com/discuss/t/new-capability-non-employee-risk-management-sources-now-support-attribute-sync-from-identity-security-cloud/151162): > > Description We are pleased to announce that Non-Employee Risk Management Sources in Identity Security Cloud (Sources configured to use the SailPoint Non-Employee Risk Management connector) will now support Attribute Sync operations. New Capabilities Support for Attribute Sync operations using Non-Employee Risk Management Sources Problem As non-employee identity access is managed and governed in Identity Security Cloud, certain attribute values need to be updated on profiles in NERM based on a… ---
**Author:** ![Bapu-Gogu](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/bapu-gogu/32/40049_2.png) [@Bapu-Gogu](https://developer.sailpoint.com/discuss/u/Bapu-Gogu)\ **Post date:** [August 4, 2026, 1:57pm UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/3 "2026-08-04T13:57:25Z")
Yes, this is a supported, native capability. Since mid‑2025, NERM sources in ISC support Attribute Sync, and NERM correlated accounts follow the same Attribute Sync mechanism as any other source. Here’s how to set it up and what actually triggers the push. **Prerequisites** The attribute must be in your Create Account definition; Attribute Sync only works on account attributes that are: Included in the NERM source’s Create Account definition and mapped directly from an identity attribute in that definition. So on your NERM source, go to Account Management \> Create Account and confirm samaccountname is mapped from the identity attribute samaccountname. If it isn’t in the create-account config, it won’t be eligible for sync. **Enable Attribute Sync on the NERM source** **Admin \> Connections \> Sources** → select your NERM source **Account Management \> Attribute Sync** Check the box in the Sync with Identity column for samaccountname. **You don’t need a workflow — provisioning to NERM fires automatically, in real time, whenever:** So in your case: when AD is re-aggregated and the identity’s samaccountname identity attribute changes, ISC should automatically provision that new value to the correlated NERM account — no manual trigger, no workflow required. ---
**Author:** ![vikaspawar0303](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vikaspawar0303/32/34710_2.png) [@vikaspawar0303](https://developer.sailpoint.com/discuss/u/vikaspawar0303)\ **Post date:** [August 5, 2026, 1:46am UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/4 "2026-08-05T01:46:39Z")
> [@MichaelCastillo7](#): > > Hello everyone, > > I have a question regarding attribute synchronization from SailPoint Identity Security Cloud to NERM. > > I created a source in ISC using the **SailPoint Non-Employee Risk Management** source type and enabled provisioning. > > In NERM, I have an attribute called `samaccountname`. This attribute is also configured in the NERM source schema in ISC, and I enabled it for attribute synchronization. > > In the ISC identity profile, I also have a `samaccountname` identity attribute whose current value is obtained from Active Directory. > > What I need is for the `samaccountname` value stored on the identity in ISC to be sent to NERM and update the corresponding non-employee profile attribute. > > However, I do not understand how to trigger provisioning from ISC to NERM so that this update is performed. > > Is it possible to automatically provision this attribute from the ISC identity profile to the NERM profile? If so, what configuration, workflow, or action should be used to trigger the synchronization? Yes, this is possible using **Attribute Sync**. If the `samaccountname` identity attribute is mapped in your Identity Profile and the same attribute is enabled for **Attribute Sync** on the NERM source, ISC will automatically generate an update when the identity attribute value changes and the account is correlated to the NERM source account. A few things to verify: - Provisioning is enabled on the NERM source. - `samaccountname` exists in the NERM account schema and is marked for Attribute Sync. - The NERM account is correctly correlated to the identity. - A change occurs in the identity attribute value. Attribute Sync is event-driven and will not trigger if the value remains unchanged. If Attribute Sync is not supported for that specific NERM attribute, an alternative approach is to use a **Workflow** that detects the identity attribute change and invokes the **NERM API** to update the non-employee profile directly. ---
**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\ **Post date:** [August 6, 2026, 7:25am UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/5 "2026-08-06T07:25:37Z")
Hello Maria. How was the NERM source created? The [current NERM admin documentation](https://documentation.sailpoint.com/ne-admin/help/connector/profile_connector.html) states that Attribute Sync is supported for sources configured from NERM under Admin \> System \> Identity Security Cloud Connection Settings using a profile type. It also states that sources created manually from ISC \> Connections \> Sources \> Create New cannot be configured for Attribute Sync. However, the [original 2025 capability announcement](https://developer.sailpoint.com/discuss/t/new-capability-non-employee-risk-management-sources-now-support-attribute-sync-from-identity-security-cloud/151162) indicated both manually and automatically configured sources were supported, so the documentation is inconsistent. Since you mentioned creating the source directly in ISC, this may explain why the attribute is not being provisioned even though Attribute Sync appears in the UI. For a supported NERM source, verify that: - The NERM profile account is correlated to the identity. - `samaccountname` is included in the source’s Create Account definition. - It is mapped directly from the `samaccountname` identity attribute. - It is selected under Account Management \> Attribute Sync. Once configured, select Sync to apply the configuration to existing correlated accounts. Future changes to the identity attribute should then be provisioned automatically. The full-source Sync is limited to three executions per 24 hours. You can also test a single identity from Identity Management \> Identities \> Actions \> Synchronize Attributes, provided the identity attribute already contains the new value. If the source must remain manually configured, a custom workflow using the Identity Attributes Changed trigger and a NERM profile update API may be possible, though it would require authentication and a reliable way to identify the corresponding NERM profile or ISC account. Given the documentation conflict, I would confirm the manual-source limitation with SailPoint Support first. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [October 5, 2026, 7:25am UTC](https://developer.sailpoint.com/discuss/t/how-can-i-trigger-attribute-provisioning-from-isc-to-nerm/218062/6 "2026-10-05T07:25:50Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.