# Problem getting native identity account in JDBC connector

**URL:** <https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627>\
**Category:** SHF Discussion and Questions\
**Tags:** connectors, provisioning, identity-security-cloud\
**Created:** [November 6, 2025, 3:19pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627 "2025-11-06T15:19:12Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [November 6, 2025, 3:19pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/1 "2025-11-06T15:19:12Z")

</div>

Hi! I have a jdbc connectors on which I have this line to retrieve account name:

`String nativeIdentity = plan.getNativeIdentity();`

But instead of this, when I do log.debug(nativeIdentity) I observe that value retrieved is the authoritative source account name, not the actual jdbc account name.

Is this expected?

---

<div class="post-metadata">

**Author:** ![amit\_1140](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@amit\_1140](https://developer.sailpoint.com/discuss/u/amit_1140)\
**Post date:** [November 6, 2025, 3:34pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/3 "2025-11-06T15:34:39Z")

</div>

@jsosa - In General a provisioning plan looks like below -

```xml
<ProvisioningPlan nativeIdentity="1c2c3d4c" targetIntegration="Wintel Application" trackingId="bad5d30189ac49f68695ca0bd93144f2">
  <AccountRequest application="Wintel Application" nativeIdentity="dbId01" op="Create">
    <Attributes>
      <Map>
        <entry key="comments" value="Test Business Justification"/>
        <entry key="flow" value="AccountsRequest"/>
        <entry key="interface" value="LCM"/>
        <entry key="operation" value="Create"/>
      </Map>
    </Attributes>
    <AttributeRequest name="userName" op="Set" value="Cindy.Little@demoexample.com"/>
    <AttributeRequest name="Inactive" op="Set" value="False"/>
    <AttributeRequest name="empID" op="Set" value="1c2c3d4c"/>
    <AttributeRequest name="Manager" op="Add" value="c0a838668c661054818c662db0cb00fe"/>
  </AccountRequest>
  <Attributes>
    <Map>
      <entry key="identityRequestId" value="0000000128"/>
      <entry key="requester" value="spadmin"/>
      <entry key="source" value="LCM"/>
    </Map>
  </Attributes>
  <Requesters>
    <Reference class="sailpoint.object.Identity" id="c0a838668c61120e818c6113437800eb" name="spadmin"/>
  </Requesters>
</ProvisioningPlan>

```

In the XML, A provisioning plan attribute contains the _nativeIdentity_ which implies that this provisioning plan belongs to which user in Sailpoint. In our case, it is for 1c2c3d4c.

```xml
<ProvisioningPlan nativeIdentity="1c2c3d4c" targetIntegration="Wintel Application" trackingId="bad5d30189ac49f68695ca0bd93144f2">

```

Next is the _AccountRequest_ attribute which contains multiple details -

1. For which application, the plan is applicable? In our case, it’s the Wintel Application.

2. What is the native identifier for the account? In our case, It is **dbId01**

3. Which operation needs to be performed? In our case, It’s the create operation.

`ProvisioningPlan.getNativeIdentity()` is **plan-level** and holds the **identity’s authoritative name** (from the source that triggered the request), not the target app’s account name. For the JDBC account, you must read the **AccountRequest’s** native identity (or its username attribute), not the plan’s.

Below is the correct way to fetch native identifier for the target system -

```java
AccountRequest accReq=plan.getAccountRequest(appName);
String nativeIdentity=accReq.getNativeIdentity();

```

Hope this helps.

---

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [November 6, 2025, 3:53pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/4 "2025-11-06T15:53:33Z")

</div>

Hi Amit thanks for responding. It is strange, because in log I see that native identity is correct in xml. But when trying to retrieve it with plan.getNativeIdentity() it brings the authoritative source account name instead.

---

<div class="post-metadata">

**Author:** ![amit\_1140](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@amit\_1140](https://developer.sailpoint.com/discuss/u/amit_1140)\
**Post date:** [November 6, 2025, 3:54pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/5 "2025-11-06T15:54:11Z")

</div>

@jsosa -

Below is the correct way to fetch native identifier for the target system -

```auto
AccountRequest accReq=plan.getAccountRequest(appName);
String nativeIdentity=accReq.getNativeIdentity();

```

---

<div class="post-metadata">

**Author:** ![amit\_1140](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@amit\_1140](https://developer.sailpoint.com/discuss/u/amit_1140)\
**Post date:** [November 6, 2025, 3:55pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/6 "2025-11-06T15:55:31Z")

</div>

> [@jsosa](#):
>
> plan.getNativeIdentity()

`ProvisioningPlan.getNativeIdentity()` is **plan-level** and holds the **identity’s authoritative name** (from the source that triggered the request), not the target app’s account name.  
Correct way to fetch -  
`ProvisioningPlan.getAccountRequest(appName).getNativeIdentity();`

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [January 5, 2026, 3:56pm UTC](https://developer.sailpoint.com/discuss/t/problem-getting-native-identity-account-in-jdbc-connector/187627/7 "2026-01-05T15:56:09Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.