Managed Attribute Description not populated from Group Schema Description Attribute

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , ,
1

Hi All,

I’m onboarding an application using the Web Services Connector in IdenityIQ 8.5 P1. In the group schema, I have configured one of the schema attributes as the Description Attribute.
During group aggregation, the value of this attribute is successfully aggregated and is available as an attribute on the ManagedAttribute object. However, it is not getting populated in the Managed Attribute Description field.
I also tried configuring the Description Attribute in the Group Aggregation Task configuration, but the behavior remains the same.
The Description is populated only when I explicitly set it in a rule (For example, using a group refresh rule).
Is this an expected behavior in IIQ? Does configuring a schema attribute as the Description Attributes automatically populate the Managed Attribute Description, or is any additional configuration required?

Thanks in advance!

2

Seems a similar issue has been reported with Azure as well with 8.4 version. : Unable to fetch group descriptions from Azure
Please check this post. You might want to reach out to sailpoint support to see if the mentioned fix is there in 8.5p1 or not?

3

Thanks for your reply. I will check the post.

4

Hello Anjana. This is not expected. During Account Group Aggregation, IIQ should populate the ManagedAttribute description from the Description Attribute configured in the group schema. That setting also overrides the task-level Description Attribute.

I would verify that the application XML contains the exact attribute name returned by the connector:

<Schema ... descriptionAttribute="description" ...>

If your source attribute is named something other than description, it needs to match exactly what the connector returns.

Also set “Automatically promote descriptions to this locale” to en_US in the Account Group Aggregation task, since IIQ uses this as the default locale when no description locale already exists.

Then run a full, non-delta group aggregation. If the value is still available in the ManagedAttribute attributes but the Description field remains empty, the refresh rule is only a workaround and I would suggest raising a SailPoint Support case for 8.5p1.

5

Hi Harish,

Thanks for your support. I had already configured description attribute in both Group Schema and Account Group Aggregation task, but I had missed setting “Automatically promote descriptions to this locale” to “en_US”. The description is populated correcly after enabling this setting.
Thanks again!