How to Provision SCIM 2.0 attribute like Name, Emails, PhoneNumbers and userGroups

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Hi Experts,
I have Name, Emails, PhoneNumbers and userGroups attribute as below. IIQ can discover, able to preview and aggregate the manager field. I’m getting “openconnector.ConnectorException: Unable to get property value using getter class:openconnector.connector.scim2.SCIM2MultiValuedPropertyGetter”
“name”: {
“formatted”: “abc xyz”,
“familyName”: “xyz”,
“givenName”: “abc”
},
“displayName”: “abc xyz”,
“phoneNumbers”: [
{
“value”: “91069967923”,
“type”: “mobile”
}
],
“emails”: [
{
“value”: “[email protected]”,
“type”: “work”
}
],
“auditable”: true,
“active”: true,
“validFromDate”: “2024-08-27”,
“validToDate”: “2080-01-01”,
“userGroups”: [
{
“name”: “PQR admin”,
“isDelegate”: true,
“validFromDate”: “2024-09-01”,
“validToDate”: “2026-09-01”
}
],
Can any one suggest me how I can send the value.
thanks in advance
Mandar

2

hey Mandar I assume you are going with Non-Compliant based configuration. You have to try updating your provisioning policies. If that does not work then you have to switch to webserive based connector as you have different payloads for provisoning.

3

Hi Uday, Thank you for your prompt response.
This is for compliant server, I’m getting error in live project and I am passing attribute using Provisioning policy.

4

Hey @Mandar45 Could you please clarify and explain more whether the field you are referring to exists in the target source?

1 Like
5

Hi Raju, Thank you for your prompt response.
Yes, all fields are exist in the target source to create user account and sample user has been created through Postman and now, I’m trying to create user using IIQ 8.3 SCIM 2.0 connector.
could you guide me how to define sub attribute and complex attribute.
sample request.txt (960 Bytes)

6

Can you share your create provisioning policy what is available in your applicaiton

7

I’ve attached screenshot of provisioning policy which configured in application.

Create Provisioning policy
Create Provisioning policy556×525 32.9 KB

8

I see you did not configure schemas, name.givenName. Can you validate if you are passing all the values and try again

1 Like
9

If I’m getting this attribute in discover schema “phoneNumbers.mobile.primary.value” then which attribute i need to define in provisioning policy.

10

Hello @Mandar45 You can simply add a new field in the Create Policy and name it phoneNumbers.mobile.primary.value. If the identity has a mobile number, you can retrieve it using identity.getAttribute("yourAttribute"), or you can set the value directly in the form.

For any attributes you want to pass during account creation, define those as fields in the form. SailPoint will then use those attributes to create the account in the target source.

8 Likes