Manager not populating for Service Accounts

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,

I have an Auth source which is AD that holds service accounts.

Usecase:

  1. Need manager for this accounts
  2. Manager correlation done with ManagerDn → manager
  3. ManagerDn holds Distinguished Name
  4. Manager holds Service Accounts manager

Does Manager correlation Supports DN? If not the manager correlation is failing for 5K plus users. How to resolve this issue.

Thanks,
Shantha Kumar

2

Manager value that you see in identity holds Account Name (Which will show on manager identity details page) of that manager and display Name. It is not a string it is an object. You cannot use that. You may have to get manager sAMAccountName or employee Id in your service account attribute and use that in your correlation config.
If you want to manually correlate you have to use Uncorrelated Accounts option that is present in the source page.

3

QQ: Does SP has default AD Manger Correlation Rule?

4

You need to use the DN to correlate as that is what is synced down to AD

5

I did not hear or see anywhere about default manager correlation.

6

@udayputta I am seeing the default manager correlation rule for AD source.
Here is the rule Name:
image

When I get the rule and see the logic. It was actually the EPIC SER rule not correlation.

7

I have created an Manger Correlation rule and it works, now the manager is populating for all users.