IdentityAttribute Cloud Rule test

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi All,

We have complex use case for calculating cloudlifeCycle state like checking identity exists or not which is not possible in transform we now started going for identity attribute I wrote identity attribute cloud rule but I won’t know where to test it as I tried using RDK it’s quiet tedious to write code in both xml and Java to use mockito lib, Is there any better approach to test rule before submitting it to vendor.

Thanks
Vasath

2

Hi @vasanthrajsp29,

Before I start, SailPoint’s recommendation is to always speak to them for assistance with writing these complex cloud rules.

If you would prefer to do it on your own, here are 3 things I usually do which you could look into to (RDK included):

  1. Testing the Rule through IdentityIQ - To help you with that, reference the Java Docs of ISC to show you the available classes. Be advised that certain methods/classes such as context are frowned apon since it makes calls to a Multi-Tenanted Architecture, and you should try use the IdnRuleUtil class.
  2. RDK is next best in my opinion. Sadly I know it is tedious, but what would be worse is if you had to constantly submit the rule to SailPoint for correcting.
  3. Review existing rules on Compass and on the developer documentation to assist.

Hope this helps.

2 Likes
3

I don’t understand why you need to check this. Identity attribute is applied only to the identities that exist. Are you checking if any other identities exist?

4

I would just like to comment on the first suggestion by @kyle1. For IDN clients, they don’t have access to IIQ like partners or customers who are using both. Also, for those that do, they may not want to set up a completely separate system just to test the rule. I do agree it can be helpful to do it that way if you have access to it, but it comes with it’s own things to set up

2 Likes
5

Hi @kyle1, noted it worked for me.
Thanks!

6

Hi @iamnithesh, Our initial plan was to calculate LCS using transform as client want some Edge Scenario (like checking Identity exists or not) then we planned to go for cloud rule.

7

Which suggestion of @kyle1’s worked for you?

8

Hi @gmilunich, RDK suggestion helped in my scenario.

9

Thanks for following up with that. It is important for others who find this topic to know since @kyle1 offered 3 possible solutions.

Thanks for marking his as the solution as well and glad it worked for you.

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.