How can we standardize the variables for sandbox or prod?

[swang0912 (Susan Wang)]

I am writing an UPN attributeGenerator rule.

1. Same rule will apply to sandbox and prod.
2. For sandbox the UPN will have suffix “.biz”
3. For prod, the UPN will have suffix “.ca”

In IIQ, there are generic token to set this suffix, I wonder how ISC can refer this? Or is any environment variable to refer sandbox or PROD?

Thanks,

[GOKUL_ANANTH_M]

Hi @swang0912 ,

To achieve environment-specific logic in ISC rules, reference the Source/Application object that the rule is running against, as this object is an input to the Attribute Generator Rule.

You will add a custom attribute to the target application in each environment to define the required suffix.

STEPS:

a. Configure the Custom Application Attribute: (This can be done using the API - update-source | SailPoint Developer Community )

1. First, add a custom attribute to the target application (e.g., the Active Directory source) in both tenants.

   Use the API, add the attribute under the connector attributes.

2. Implement the Logic in the Attribute Generator Rule.

   String upnSuffix = application.getStringAttributeValue("custom_attribute");

Thanks! ~ Gokul

[GOKUL_ANANTH_M]

I have suggested this approach because,

1. You can write and test one rule file. When you migrate the rule from Sandbox to Production, the rule is identical, which simplifies the promotion process.
2. The environment-specific data is stored in the application configuration, not hard-coded in the rule.
3. If you introduce a third environment later, you can just create the source and set a new upnSuffix attribute on that source without touching the rule logic.

Thanks ~ Gokul

[swang0912 (Susan Wang)]

Thank you and I will consider the approach.

Susan