NERM assignments do not get correlated to the identity when using the automated Non-Employee Risk management connector

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

I have configured NERM to automatically created the schema and sync the profiles using the Non Employee Risk Management default source (Non-Employee).

Under Admin > System > Identity Security Cloud Connection Settings, I configured all the required attributes according to the documentation - Profile types: End User (person) and contract(assignment). But the assignment accounts are not correlated to the identities instead they are created as identities.

image
image934×412 11.5 KB

The attribute here is a profile search type.

image
image1585×225 9.43 KB

image
image1435×586 26.9 KB

in NERM I see the link between profiles

image
image1624×190 11.6 KB

2

I tried the Apply change option many times in ISC, but it didn’t work

image
image1066×118 6.5 KB

3

How do you have your identity profile set for this source? The way we have set up NERM in the past is using Web Services Connector and we had to set up 2 sources one for the Non Employee Profile and one for the assignments and then built the correct collation logic.

Are you able to share more about how you have this configured?

4

Check this new capability here New Capability: Automated schema creation and syncing for Non-Employee Risk Management Source in ISC - Announcements / Product News - SailPoint Developer Community
Documentation :Managing Non-Employee Profiles in Identity Security Cloud - SailPoint Non-Employee Risk Management Admin Help
section : Automatically Creating a Source From Profile Types

5

So are you having issues in NERM or when it comes over to ISC?

6

When it comes to ISC the assignments are not correlated to the person identity.

7

Are you using 2 sources?

8

No the new capability aggregates both profiles in the same source

9

are you able to share the api config for the source? Have you also tried confirming the payload using postman?

10

Hello Safae,

in NERM - is Assignment correlating to a Person profile?

In other words do you have a reversible_relationship attribute between Assignment and Person?

11

Yes, in NERM , the Assignment are correlated to a Person profile and vice versa.

There is a reversible_relationship attribute between Assignment and Person.

12

In NERM Admin → **Identity Security Cloud Connection Settings
**
Are you syncing both Non-Employee and Assignment?

image
image650×472 20.8 KB

13

Yes I am syncing both profiles, and both are aggregated to ISC.

14

Do you have the correct reversable-relationship attribute(s) mapped in the Person sync attributes?

I see you have your own configured attribute under the Assignment attribute. Here is my config, using the rr attribute.

image