# Match List / Population Selection Configuration

**URL:** <https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, provisioning\
**Created:** [June 24, 2024, 2:47pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227 "2024-06-24T14:47:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![itzsam91](https://avatars.discourse-cdn.com/v4/letter/i/ecb155/32.png) [@itzsam91](https://developer.sailpoint.com/discuss/u/itzsam91)\
**Post date:** [June 24, 2024, 2:47pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227/1 "2024-06-24T14:47:38Z")

</div>

### Which IIQ version are you inquiring about?

Version 8.3

### Please share any images or screenshots, if relevant.

 ![AD1.png](https://global.discourse-cdn.com/sailpoint/original/2X/2/27e9585dab4c1cabe036fc0f3abbf07ee75a80b3.png)  
 ![IdentitySearch.png](https://global.discourse-cdn.com/sailpoint/original/2X/2/2938966f11868c6fda7029103759dce3400dddbc.png)

### Share all details related to your problem, including any error messages you may have received.

Hi there,

This is in regards to the “Assignment Rule” on a Business Role.

We’re able to assign a custom population created through Advanced Analytics. But for our Advanced Analytics, we’re unable to utilize filtering for lastLogin / lastLogonTimestamp.

If we change the “Assignment Rule” to “Match List” - we’re able to add “Active Directory” as an Application Attribute and can now select lastLogin / lastLoginTimestamp.

Is there a way to pull the Active Directory attribute(s) into the XML to further filter out the custom Population?

Or is this something we have to configure via Identity Mapping?

On a side note; lastLogin / lastLoginTimestamp only have “Equals, Not Equals, and Is Null” as option. Is there a simple way to check for greater than xyz of Current date?

Thank you!

---

<div class="post-metadata">

**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\
**Post date:** [June 24, 2024, 3:41pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227/2 "2024-06-24T15:41:28Z")

</div>

> [@itzsam91](#):
>
> Hi there,
> 
> This is in regards to the “Assignment Rule” on a Business Role.
> 
> We’re able to assign a custom population created through Advanced Analytics. But for our Advanced Analytics, we’re unable to utilize filtering for lastLogin / lastLogonTimestamp.
> 
> If we change the “Assignment Rule” to “Match List” - we’re able to add “Active Directory” as an Application Attribute and can now select lastLogin / lastLoginTimestamp.
> 
> Is there a way to pull the Active Directory attribute(s) into the XML to further filter out the custom Population?
> 
> Or is this something we have to configure via Identity Mapping?
> 
> On a side note; lastLogin / lastLoginTimestamp only have “Equals, Not Equals, and Is Null” as option. Is there a simple way to check for greater than xyz of Current date?
> 
> Thank you!

Hi @itzsam91,

yes, i think the best and easy way is create an IDN attribute like searchable and with ad attribute mapping.

Also, in the assignation rule, you need filtering for all the identities with and account AD and those attributes.

You can choose the second way for dont update DB.

I prefer the first one, because you use the IDN attribut for other operation, the leaver process for example

---

<div class="post-metadata">

**Author:** ![uday\_kilambi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/uday_kilambi/32/31482_2.png) [@uday\_kilambi](https://developer.sailpoint.com/discuss/u/uday_kilambi)\
**Post date:** [June 24, 2024, 4:36pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227/3 "2024-06-24T16:36:46Z")

</div>

Hi @itzsam91 ,

I would suggest to use IdentitySelector rule or the rule type for Assignment rule which offers more flexibility to achieve the customization.

You can use the rule to get the active directory account of the identity and the specific attribute lastLoginTimeStamp from the account. You can add your logic of verification of number of days and return true accordingly.

I do not suggested a dedicated identity attribute for this requirement unless you need it for other requirements too.

Let me know in case of any questions.

Regards,  
Uday Kilambi

---

<div class="post-metadata">

**Author:** ![ashutosh08](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ashutosh08/32/11459_2.png) [@ashutosh08](https://developer.sailpoint.com/discuss/u/ashutosh08)\
**Post date:** [June 24, 2024, 5:07pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227/4 "2024-06-24T17:07:34Z")

</div>

Hi @itzsam91,

Simple approach will be to have a searchable attribute and then use it. It will be simple to implement.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 23, 2024, 5:07pm UTC](https://developer.sailpoint.com/discuss/t/match-list-population-selection-configuration/68227/5 "2024-08-23T17:07:49Z")

</div>

Closed on August 23, 2024, 5:07pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.