How to change the manager automatically?

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello everyone

I have a problem

I have two fields, MATRICULA_GESTOR and GESTOR_SUBSTITUTO.
MATRICULA_GESTOR is used to correlate a manager, and GESTOR_SUBSTITUTO is used when the first manager’s lifecycle state is vacation or terminated. Is there any way to change the manager without going to the authoritative source?

I did a transform but it didn’t work because the attribute that correlates the manager is MATRICULA_GESTOR

Can anyone help me?

image
image1700×416 54.6 KB

Ana is the first manager who is not correct because her life cycle is terminated.

image
image1703×495 43.8 KB

As you can see, MATRICULA_GESTOR is Ana and GESTOR_SUBSTITUTO is Fernanda, I need Fernanda to appear as Carlos’ manager

Ana is terminated

image
image1632×262 34.6 KB

Fernanda is active

image
image1632×262 36.1 KB

My transform
{
“id”: “9063daa8-498b-4620-b5a8-2089bfd4eff5”,
“name”: “Gui - Gerente Substituto”,
“type”: “static”,
“attributes”: {
“firstManager”: {
“type”: “static”,
“attributes”: {
“value”: “$identity.getManager().getAttribute("cloudLifecycleState")”
}
},
“secondManager”: {
“type”: “static”,
“attributes”: {
“value”: “$identity.getAttribute("secondManager")”
}
},
“value”: “#if($firstManager == ‘terminated’ || $firstManager == ‘vacation’ || $firstManager == ‘leaveOfAbsence’)$secondManager#{else}$firstManager#end”
},
“internal”: false
}

atribute second manager

image
image1700×414 53.7 KB

my correlation manager in my authoritative source

image
image860×311 16.3 KB

2

@guilherme_sec Remove UI manager correlation configuration and validate. I think its taking precedence. Or check manager correlation rule

3

Your transform seems to be incorrect. $firstManager seems to be the LCS of the manager and not the manager itself, and the value should be manager identity and not LCS. Anyways, using transform to validate the LCS of manager and provide the resultant manager, will cause trouble as you can’t decide the processing of identity attributes (LCS and manager field). Therefore, you should use manager correlation rule for this scenario.

4

I don’t think it works with Transform, you need to remove Manager correlation and setup Manager correlation Rule with the logic.

1 Like
5

This will not work until and unless you have a Manager Correlation Rule configured. We had the same issue and we got it working only after deploying Manager Correlation Rule

6

This is the correct response. In this case you cannot assign alternative manager using transform. You need Manager Correlation Rule

2 Likes
7

Great, thanks guys.

I don’t know how to use the rule, someone help me ?

I need know how to configure a rule with my authoritative source, my source is a type JDBC.

8
9

I have already accessed this document before, but I want to know how to configure this code in my source?
How do I configure it?
Is it through VS Code?
Could you describe the steps to me?

10

This is a cloud rule, which means you need to create a support ticket with SailPoint. All conditions that apply to a cloud rule will be applicable for this too.

Once the rule is deployed, you can update your source using VS Code extension

image
image523×109 3.53 KB

11

so, I can’t select a rule type in my VS Code to correlate the manager?

image
image583×445 46.6 KB

I thought I could select some type of these rules and copy the code and check the code below to see if it works

<?xml version='1.0' encoding='UTF-8'?> Finds a manager based on the manager.email attribute. <![CDATA[

Map returnMap = new HashMap();

String managerEmail = link.getAttribute( “manager.email” );
returnMap.put( “identityAttributeName”, “email”);
returnMap.put( “identityAttributeValue”, managerEmail );

return returnMap;

]]>

12

No, you can’t as VS Code extension is to create Connector rules only. Manager Correlation rule is a cloud rule