I have an account.filterString for Okta source, but the accounts being filtered are still being aggregated (sort-of).
I feel this is because they are members of groups that are being aggregated, so a placeholder uncorrelated account is created in ISC.
(no account details, only the native identity and ‘groups’ attributes have values)
How do I fix this, so placeholder uncorrelated accounts are not created?
I am filtering them out because I dont want them in this ISC source at all, not even as uncorrelated.
Thank you
Some more context, I think I know what is happening (not 100% sure). Still an issue/defect:
Looks like the account filter worked, and placeholder identities weren’t created after account aggregatation.
We do have delta aggregation enabled for this source.
Looks like when an Okta group was updated that the filtered account was also a member of, then the delta aggregation picked up this group membership change, and so this created the placeholder identity/account.
Does this make sense?
- Account filter to filter out firstName = “Jeff”
- Account aggregation
- I can see Jeff’s okta account is not in ISC (as expected)
- Repeated steps 2 and 3, to make sure.
- Okta update to ‘myUsers’ group, add in “Alice”. (Jeff is already a member of this group)
- Entitlement aggregation runs in ISC
- Uncorrelated account created for Jeff. Only contains nativeIdentity and groups attributes