How to clear off the identity attribute value after workflow running

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi all,

I would like to clear off/ remove the identityAttribute (eg: “accountToUncorrelate”) after my UncorrelateAccount workflow finish running.

I have tried with identity attribute rule and applied it on the accountToUncorrelate identity attirbute in identity profile mapping but it is not working.

May I know is there any other way to achieve this?

Thank you.

Regards,
Shuen

2

Hello @ShuenShuen1,

What’s your uncorrelated workflow do exactly ? what’s source authorative source ?

I think you can acheive this by using transform into your identityprofile mapping.

3

Hi @ShuenShuen1,

As per your post you are using attribute rule. So, your account is not being correlated?

If the issue is as above stated, then kindly share the rule by omitting sensitive code so that I can help.

Thanks

4

Hi Ousmane,

The workflow is actually running the API (Beta API/accounts/remove) to remove the user’s account. Which account need to be removed is depends on the identityAttribute (accountToUncorrelate). Whichever source is listed in the identityAttribute, the workflow will remove the accounts according to the sourceName listed in the accountToUncorrelate.

After the account get removed from the workflow, we would like to clear off the accountToUncorrelate attribute.

May I know what kind of operation that I should use in the transform?

5

Hi Ashutosh,

Let me clarify on the issue I am facing now.

The authoritative source will pass in a value and store in an identityAttribute called: accountToUncorrelate.

The workflow is actually running the API (Beta API/accounts/remove) to remove the user’s account. Which account need to be removed is depends on that accountToUncorrelate attribute. Whichever source is listed in the attribute, the workflow will remove the accounts according to the sourceName listed in the accountToUncorrelate attribute.

After the account get removed from the workflow, we would like to clear off the accountToUncorrelate attribute. But the issue now is by using the identity rule, it is not clearing off the attribute value as expected.

Therefore, I would like to know other than identity rule, is there any other approach we can use to clear off the identity attribute value after the workflow finish running.

6

@ShuenShuen1 you can use firstValid transform with following logic : :

{
     "name": "First Valid Transform example",
      "type": "firstValid",
       "values": [ 
        "type": "accountAttribute",
         "attributes": {
          "sourceName": {
               "input": {
                       "type": "identityAttribute",
                       "attributes": {
                              "name": "accountToUncorrelate"
                            },
                }
             },
          "attributeName": "yourSourceAccountId"
        }
      },
        ""
      ]

}

The idea of this transform is to pull accountId of sourceName that are containing in your identity attribute accountToUncorrelate, if this account are not exist (deleted by the worklfow), accountToUncorrelate will be clear.

But can you tell me how this accountToUncorrelate is initiated with sourceName ? it contain always one sourceName ?

1 Like
7

Hi @ShuenShuen1,

So, after workflow completion this rule is being triggered by aggregation process or via API?

Ideally if it is after aggregation then your target system is not clearing it? If not then you may use a transform to simply fetch the account you uncorrelated and then based on result you can set this value to empty string.

Let me know if I am missing something in the issue.

Thanks

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.