# Is not possible apply filter in Certification

**URL:** <https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135>\
**Category:** IIQ Discussion and Questions\
**Tags:** certifications, identityiq\
**Created:** [November 2, 2023, 11:48am UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135 "2023-11-02T11:48:04Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![ismaelmoreno1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ismaelmoreno1/32/2756_2.png) [@ismaelmoreno1](https://developer.sailpoint.com/discuss/u/ismaelmoreno1)\
**Post date:** [November 2, 2023, 11:48am UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/1 "2023-11-02T11:48:04Z")

</div>

Hi experts,

We are working with certification account, and I would like search accounts in the certification applying a filter. In this case, I would like filter accounts in status locked(Locked Account = true)

In our case there are accounts with Locked Account value as ‘true’ as is showed in the following image

![Capture_filter2](https://global.discourse-cdn.com/sailpoint/original/2X/6/67e876c0b7520a5560b5ac311e8feae98070f914.jpeg)

But, when I try seach by Locked Account, true or false values are not showing

 ![Capture_filter](https://global.discourse-cdn.com/sailpoint/original/2X/8/8899427db9311c5bccdc848a4254f9a8383f8429.jpeg)

Any idea about this issue?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![Remold](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/remold/32/3275_2.png) [@Remold](https://developer.sailpoint.com/discuss/u/Remold)\
**Post date:** [November 2, 2023, 1:38pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/2 "2023-11-02T13:38:23Z")

</div>

I would create an Certification Exclusion Rule to exclude accounts where locked==true

See [Rules In IdentityIQ](https://community.sailpoint.com/t5/Technical-White-Papers/Rules-in-IdentityIQ/ta-p/78176) for an example of a similar CertificationExclusion rule.

You can specify the Exclusion Rule in the Advanced section when configuring a Certification Campaign:

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/3/354f668dcdf7f7221e46c840105e857dc8d629ed.png)

– Remold

---

<div class="post-metadata">

**Author:** ![ismaelmoreno1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ismaelmoreno1/32/2756_2.png) [@ismaelmoreno1](https://developer.sailpoint.com/discuss/u/ismaelmoreno1)\
**Post date:** [November 2, 2023, 4:00pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/3 "2023-11-02T16:00:55Z")

</div>

hi @Remold

Thanks for your quick response. In our is neccesary include accounts locked because certifier user must take action approve/revove of these accounts

---

<div class="post-metadata">

**Author:** ![Remold](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/remold/32/3275_2.png) [@Remold](https://developer.sailpoint.com/discuss/u/Remold)\
**Post date:** [November 2, 2023, 5:02pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/4 "2023-11-02T17:02:06Z")

</div>

Sorry Ismael, I did not read the question correctly ☹

Is the attribute `Locked Account` a searchable Identity Attribute ?  
(Best to see via Debug-\>ObjectConfig-\>Link see if the ObjectAttribute element has a propery extendedNumber with value between 1 and 5)

– Remold

---

<div class="post-metadata">

**Author:** ![ismaelmoreno1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ismaelmoreno1/32/2756_2.png) [@ismaelmoreno1](https://developer.sailpoint.com/discuss/u/ismaelmoreno1)\
**Post date:** [November 6, 2023, 1:41pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/5 "2023-11-06T13:41:16Z")

</div>

In our case, there is not extensionAttribute. The object Link is the following

```auto

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ObjectConfig PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<ObjectConfig name="Link">
  <ObjectAttribute displayName="Locked Account" editMode="ReadOnly" name="lockedAccount" namedColumn="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-Locked"/>
    </RuleRef>
    <AttributeSource name="GlobalRule:Rule-FrameWork-Locked">
      <RuleRef>
        <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-Locked"/>
      </RuleRef>
    </AttributeSource>
  </ObjectAttribute>
  <ObjectAttribute displayName="Disabled Account" editMode="ReadOnly" name="disabledAccount" namedColumn="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-Disabled"/>
    </RuleRef>
    <AttributeSource name="GlobalRule:Rule-FrameWork-Disabled">
      <RuleRef>
        <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-Disabled"/>
      </RuleRef>
    </AttributeSource>
  </ObjectAttribute>
  <ObjectAttribute displayName="Privileged Account" editMode="ReadOnly" name="psAccount" namedColumn="true" type="string">
    <RuleRef>
      <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-PSA"/>
    </RuleRef>
    <AttributeSource name="GlobalRule:Rule-FrameWork-PSA">
      <RuleRef>
        <Reference class="sailpoint.object.Rule" name="Rule-FrameWork-PSA"/>
      </RuleRef>
    </AttributeSource>
  </ObjectAttribute>
</ObjectConfig>

```

---

<div class="post-metadata">

**Author:** ![ismaelmoreno1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ismaelmoreno1/32/2756_2.png) [@ismaelmoreno1](https://developer.sailpoint.com/discuss/u/ismaelmoreno1)\
**Post date:** [December 11, 2023, 10:11pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/6 "2023-12-11T22:11:42Z")

</div>

We noted that this issue occurs with users without administration capability.  
In this case, scope was not properly set in the identity, so for this reason information was not being showed properly in the filer.

We disabled scope configuration and finally we were able to apply filter properly

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [February 9, 2024, 10:12pm UTC](https://developer.sailpoint.com/discuss/t/is-not-possible-apply-filter-in-certification/20135/7 "2024-02-09T22:12:39Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.