Dear Sir or Madam,
In this case, we have three requests:
Uncorrelated (not linked to any identity)
Not disabled
From a specific source (AD)
The AD has an additional settings in Authentication Attributes (1):
sAMAccountName
We have tried the following method:
accounts(source.name:“AD” AND status:“Active” AND correlated:false)
account(source.name:“AD” AND correlated:false)
access(source.name:“AD” AND correlated:false)
Even used the simple search query:
source.name:“AD”
The returned values are not what we need, and they are from a different data source rather than the intended AD.
Based on the issues above:
How can we achieve the intended results using a Search Query?
Is there any feature that might not have been enabled, which is preventing us from using Search as expected? (Please refer to the attached screenshot.)
The search module displays only the correlated accounts/Identities. You will need to make use of the API call to get the uncorrelated account details. Try the below API with filter like this - /accounts?filters=uncorrelated eq true and sourceId eq "YourSourceID"
For the other queries, try the below ones:
@accounts(source.name:"ActiveDirectory")
@accounts(source.name:"ActiveDirectory" AND disabled:false)
Hello,
Thank you very much for your kind guidance and support.
These will certainly help us refine our search and troubleshooting process more effectively.