How to detect identities with multiple accounts?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We hace some identities which has more than one account for some source. Is there some way to retrieve all identities that has 2 or more accounts of the same source? That should be something like

@accounts(source.name:“MYSOURCE”) >= 2

2

you mean multiple access profiles or ents in a source? because multiple account does not be the correct statement for the same source

3

We have a similar issue where an AD account is created when an Identity is created from Workday, but the user already had an account, but the account was un-correlated until the Identity came in via Workday. Finding how many users have more than one AD account correlated is difficult. I’d love to figure that out too.

4

Indeed, we have some cases where 2 accounts where erroneusly correlated to some identities, and need to obtain some report to identify the identities which has this problem.

5

Hi
Try with IdentityNow API with an External Script for Aggregation.This can-do custom filtering exactly as you want.
(V3 APIs | SailPoint Developer Community)

6

hello @jsosa

Try query - @accounts(source.name:) AND accountCount:[1 TO 2] /@accounts(source.name:) AND (accountCount:[0 TO 2])

I tried combining both conditions using “AND” inside a single set of brackets, but it didn’t return any results.
Even when I separate them, the results are not as expected.

Note- for a specific source, just add the source name in the query.

7

Hi @jsosa,

Take a look at this thread for reference.

8

tried to run this but I do now know how to interpret result, returns about 600k lines