Identities turned out to be incomplete when it had missing lastname/email

Identity Security Cloud (ISC) ISC Discussion and Questions
1

There were some terminated users in the newly onboarded delimited application, we found that some of the terminated identities had missing lastname or email, after doing all the mapping stuff and aggregation we found that these were not under uncorrelated section. These identites were found in incomplete identities and not under uncorrelated section. when i tried to export only incomplete identities using export it instead provided me with complete list of tenent identities.

2

Use Identity Search API

You can use the Identity Search API with a filter for incomplete identities:
GET /v3/search/identities

  • This will return only the incomplete identities, and you can export them.

Option 2: Use Identity Attributes in Search UI

  1. Go to IdentityNow Admin Portal → Identities.
  2. Use the search filter:
    attributes.incomplete:true
  • Check if the UI properly filters only incomplete identities.
  • If it works, manually export the filtered results.

Option 3: Fix Attribute Mapping & Reaggregate

  • Check the Identity Profile Mappings to ensure lastname and email are mapped correctly.
  • Make sure that your Delimited File source correctly provides values for required attributes.
  • Run another aggregation after fixing mapping issues.
3

Thanks for your inputs I will try this out

4

You can try going to Search and using NOT_exists to extract identities that don’t have a specific attribute.
NOT _exists_:attributes.lastname
Building a Search Query - SailPoint Identity Services

1 Like
5

Hi @Vinayaksd,
Were you able to extract the report you needed?

6

yes i was able to get the extract of incomplete identites.