Manual Correlation Report

[Remold (Remold Krol)]

Which IIQ version are you inquiring about?

Version 8.X

Share all details related to your problem, including any error messages you may have received.

We want to enhance our correlation rules to reduce the need for manual correlation. To set priorities on which correlation rules should be updated we want to see how many accounts have been manually correlated (if possible per application).

Does anyone know if there is an Out-of-the-Box report which shows which accounts have been correlated manually?
If there is no OOTB report, does anyone have such a report and is willing to share it?

Thanks,
Remold

[kjakubiak (Kamil Jakubiak)]

Try this one

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE TaskDefinition PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<TaskDefinition executor="sailpoint.reporting.LiveReportExecutor" name="Manually Correlated Accounts" progressMode="Percentage" resultAction="Rename" subType="Identity and User Reports" template="true" type="LiveReport">
   <Attributes>
    <Map>
      <entry key="report">
        <value>
          <LiveReport title="Provisioning Simulation Records Report">
            <DataSource objectType="sailpoint.object.Link" type="Filter">
              <OptionsScript>
                <Source>
                  import sailpoint.object.Filter;
                  import sailpoint.object.Identity;
                  import sailpoint.object.Application;
                  import sailpoint.tools.Util;
                  Filter f1;
              		f1 = Filter.eq("manuallyCorrelated", true);
                  String applicationField = args.get("app");
                  if(applicationField != null) {
                  	Application app = context.getObject(Application.class,applicationField);
                    String applicationName = app.getName();
                    if(f1 == null) {
                        f1 = Filter.eq("application.name", applicationName);
                    } else {
                        f1 = Filter.and(f1,Filter.eq("application.name", applicationName));
                    }
                  }
                  options.add(f1);                 
                </Source>
              </OptionsScript>
            </DataSource>
            <Columns>
              <ReportColumnConfig field="nativeIdentity" header="Native Identity" property="nativeIdentity" sortable="true" width="32"/>
              <ReportColumnConfig field="applicationName" header="Application Name" property="application.name" sortable="true" width="32"/>
              <ReportColumnConfig field="displayName" header="Display Name" property="displayName" sortable="true" width="32"/>
              <ReportColumnConfig field="manuallyCorrelated" header="Manually Correlated" property="manuallyCorrelated" sortable="true" width="32"/>
              <ReportColumnConfig field="identityName" header="Identity Name" property="identity.name" sortable="true" width="32"/>
              <ReportColumnConfig field="identityFirstName" header="Identity First Name" property="identity.firstname" sortable="true" width="32"/>
              <ReportColumnConfig field="identityLastName" header="Identity Last Name" property="identity.lastname" sortable="true" width="32"/>
            </Columns>
          </LiveReport>
        </value>
      </entry>
    </Map>
  </Attributes>
  <Description>Displays the name and full/part time status of users with the given first name</Description>
  <Signature>
    <Inputs>
      <Argument name="app" type="Application">
        <Prompt>Application</Prompt>
      </Argument>
    </Inputs>
  </Signature>
</TaskDefinition>

[ashutosh08 (Ashutosh Singh)]

Hi @Remold,

You may also use OOTB “User Account Attributes Report” which takes data from link and just add one sample column as below to get manual correlation.

<ReportColumnConfig field="manuallyCorrelated" header="Correlation" property="manuallyCorrelated" skipLocalization="true" sortable="true" width="110"/>

Thanks

[Remold (Remold Krol)]

Thanks Ashutosh! This is indeed the simplest solution

@kjakubiak your report has a small issue with casting from String to Application

– Remold

[kjakubiak (Kamil Jakubiak)]

Good point - fixed if someone would like to use it