How to set Identity's manager value during account creation in Azure Active directory source in Sailpoint IDN connector?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

how to set Identity’s manager value during account creation in Azure Active directory source in Sailpoint IDN connector?

2

Hi @shefaliarora, in order to populate the manager attribute during the account creation for Entra ID (AAD) you have to get the manager’s UPN. You can follow the steps below to implement this:

  • Create a new identity attribute “User Principal Name” and populate it with the user’s UPN from their Entra ID account.
  • Next, you need to create a new identity attribute called “Manager UPN”. This attribute will hold the manager’s UPN. You can get this value using the the reference transform Get Reference Identity Attribute | SailPoint Developer Community. Your transform should look something like this.
{
	"name": "Get Manager UPN",
	"type": "rule",
	"attributes": {
		"name": "Cloud Services Deployment Utility",
		"operation": "getReferenceIdentityAttribute",
		"uid": "manager",
		"attributeName": "userPrincipalName"
	}
}

You can then use the manager UPN attribute in your Create Account profile.

2 Likes
3

Hi @shefaliarora, Mehdi’s reply is accurate - just adding an alternative approach:
You can set the manager attribute during Azure AD (Entra ID) account creation in SailPoint ISC. Azure accepts the manager’s userPrincipalName (UPN) as a valid reference.
To implement:

  1. Create an identity attribute (e.g., managerUPN) to hold the manager’s UPN.
  2. Use a reference transform to fetch the manager’s UPN dynamically:
{
  "type": "reference",
  "attributes": {
    "reference": "manager",
    "attributes": ["userPrincipalName"]
  }
}
  1. Map the manager attribute in your Create Account provisioning policy to this managerUPN attribute.
    This will provision the manager successfully as long as the UPN exists and is resolvable in Azure AD.

Note: If your Azure AD setup requires objectId instead of UPN for the manager field, you’ll need to adjust the attribute pulled in the transform accordingly.

Thanks @MeKhalbi for pointing the right direction — this just adds another method for implementation.

Regards,
Mustafa

3 Likes
4

Thanks for your response!!

5

Thank you for your response!!

6

you are more than welcome @sarora5 :slight_smile: !