Issue with Null Values When Referencing Identity and Account Attributes in Enable/Disable Mode

Identity Security Cloud (ISC) ISC Discussion and Questions
, , , ,
1

Hi everyone, how are you? :waving_hand:

I’m currently facing an issue with my provisioning policies in Enable/Disable mode.

In these configurations, I referenced both an identity attribute and an account attribute. However, during execution, both attributes return null, even though the values are correctly populated in the identity and account data.

To validate the behavior, I created a new custom attribute in the identity and referenced it in the same policy — and this time, it worked as expected.

This suggests that the issue is not with the reference mechanism itself, but possibly with how the original attributes are being resolved or accessed at runtime.

Below are simplified examples of both **UPDATE (**this works) and DISABLE (its not work) provisioning policies:

{
  "name": "Update",
  "description": null,
  "usageType": "UPDATE",
  "fields": [
    {
      "name": "email_corp",
      "transform": {
        "type": "accountAttribute",
        "attributes": {
          "name": "email_corp",
          "sourceName": "MXM HLG"
        }
      },
      "attributes": {},
      "isRequired": false,
      "type": "string",
      "isMultiValued": false
    }
  ]
}


{
  "name": "Disable",
  "description": null,
  "usageType": "DISABLE",
  "fields": [
    {
      "name": "email_corp",
      "transform": {
        "type": "accountAttribute",
        "attributes": {
          "name": "email_corp",
          "sourceName": "MXM HLG"
        }
      },
      "attributes": {},
      "isRequired": false,
      "type": "string",
      "isMultiValued": false
    }
  ]
}

Has anyone experienced similar behavior or knows if there are specific limitations when referencing identity/account attributes in Enable/Disable mode?

Thanks in advance for any help or insights!

2

Hey @henriqueoliveiraIAM ,

Try using a firstValid transform it .

{
  "name": "Disable",
  "description": null,
  "usageType": "DISABLE",
  "fields": [
    {
      "name": "email_corp",
      "transform": {
        "attributes":{
          "values":[
            {
        "type": "accountAttribute",
        "attributes": {
          "name": "email_corp",
          "sourceName": "MXM HLG"
        }
      },
      {
        "attributes": {
          "value": ""
        },
        "type": "static"
      }
      ]
      },
      "type":"firstValid"
      },
      "attributes": {},
      "isRequired": false,
      "type": "string",
      "isMultiValued": false
    }
  ]
}

Try this transform and let me know if it works.

Thanks,

Naveen