How to access Create Account Policy attributes in AddEntitlement operation for Web Service COnnector

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,

I have a requirement to create an account and assign a specific entitlement on a target application and am using the Web Services connector , I am able to successfully create the account; however, I am facing issues while adding the entitlement.

The Add Entitlement operation expects certain account attributes such as email, firstName, and lastName. These attributes are defined in the Create policy, and I attempted to reference them in the Add Entitlement operation body using the following approaches:

wd:email$plan.accounts[0].attributes[email]$</wd:email>

and

wd:email$plan.email$</wd:email>

Unfortunately, neither approach is working.

To validate whether these values are present in the provisioning plan, I implemented a Before Operation rule for the Add Entitlement operation and logged the plan object. I can see that all the required attributes are indeed available in the plan.

However, Iā€™m not sure why Iā€™m unable to access them directly in the payload body.

Any pointers or guidance would be greatly appreciated.

Thanks in advance!

2

Payload might expect the values in different format. can u share the logs ?

3

Are you using SaaS connector ?

4

Hi @MounikaPrathapani ,
Can you please share how logs from the Search tab when the plan is created. Go to Admin ā†’ Search ā†’ Search the User ā†’ Account Activity ā†’ Please paste the content of the source which we are facing issue. We want to check what all attributes are passed in the plan. Also, please share how the Add Entitlement Operation is configured. The Body

Thanks