Identity Mapping in IIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

So I added a new attribute in SailPoint “ADDisplayName” but when I compare with existing iiq attribute the structure is different. Can I change the ADDisplayName structure like staffid.

<ObjectAttribute displayName="ADDisplayName" editMode="ReadOnly"  name="adDisplayName" type="string">
    <AttributeSource name="AppRule:  Identity Attribute Copy Rule HR">
      <ApplicationRef>
        <Reference class="sailpoint.object.Application"  name="HR"/>
      </ApplicationRef>
      <RuleRef>
        <Reference class="sailpoint.object.Rule"  name="Identity Attribute Copy Rule"/>
      </RuleRef>
    </AttributeSource>
    <AttributeTargets>
      <AttributeTarget name="displayName" provisionAllAccounts="true">
        <ApplicationRef>
          <Reference class="sailpoint.object.Application"  name="%%AD_APP_NAME%%"/>
        </ApplicationRef>
      </AttributeTarget>
    </AttributeTargets>
  </ObjectAttribute>
  
  
  <ObjectAttribute displayName="Staff Id" editMode="ReadOnly" name="staffId" namedColumn="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" name=" Identity Attribute Copy Rule"/>
    </RuleRef>
    <AttributeSource name="sAMAccountName">
      <ApplicationRef>
        <Reference class="sailpoint.object.Application" name="%%AD_APP_NAME%%"/>
      </ApplicationRef>
    </AttributeSource>
    <AttributeSource name="AppRule: Identity Attribute Copy Rule HR">
      <ApplicationRef>
        <Reference class="sailpoint.object.Application" name="HR"/>
      </ApplicationRef>
      <RuleRef>
        <Reference class="sailpoint.object.Rule" name=" Identity Attribute Copy Rule"/>
      </RuleRef>
    </AttributeSource>
  </ObjectAttribute>
2

Hi Rita,
Based on your post I am not 100% sure what your problem is, but I had a look at your identity mappings:
Please check the above mentioned Rule name. It has a leading space which will probably cause problems.

Cheers
Steffen

3

@j1241 it looks fine.

For staffId, there is 2 source mapping, its kind of fallback.
a. sAMAccountName from %%AD_APP_NAME%%
b. AppRule from HR App.

For ADDisplayName, You have only 1 Source mapping.

Also, space should be there after AppRule: . you can try to use UI and add this logic in identity mapping. Global Setting → Identity Mapping → choose ADDisplayName → Remove source then add it again.

Let me know if you have some more specific questions.

4

Hello @pravin_ranjan Thank you for your response.

My question why there is difference in sequence of AttributeSource, ApplicationRef and RuleRef.

And does the sequence needs to be the same for all IIQ attributes

Thank you

5

@j1241 the sequence will be readjust when you will import the file that’s why i said you can use UI to configure it and get the xml changes and put in xml file for build.

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.