Multiple Auth Source

Hi Team, Good day! In IDN, we have 2 auth source(HR & SNOW). Priority is given to HR identity profile. We have a requirement to update the termination date in IDN from SNOW, if the user has SNOW application. Later, if any modification done in HR DB, it has to pull the termination date from HR. We do not have any timestamp saying HR DB has been updated. Kindly let us know if we have any feasible solution. Thanks !!

Hi @Sasi13130203,

Welcome to sailpoint community!!

I’ve couple of questions:

  1. What if user don’t have SNOW applications how termination date is updated in HR dB?
  2. Whether you’re writing termination date back to HR dB? If termination date are calculated in IDN from SNOW?

-Vasanth

One way to go about this is:

  1. Source the termination date identity attribute from a transform: First Valid transform
  2. The first valid transform has to look for the termination date first in the HR, and next in SNOW.

I’m assuming that you first get the termination date in SNOW, so it should be empty in the HR. If ever the HR source gets the termination date, that will be the source for the identity attribute. This way, you don’t have to worry about the modification timestamps.

1 Like