Good day
I need to specify an Entitlement ‘Display Name’ in the request body of the ‘Add Entitlement’ operation on the WebServices Connector.
- Please advise on how this can be achieved on the WebServices Connector if the entitlement will be added using an access profile?
Sample request body (note that on the account schema, the entitlement name is a multi-valued attribute however a single attribute can be added to the account without needing to list all other values):
{
"tags": [
{
"name":"EntitlementName",
"status":"active"
}
],
"is_syncing": false
}
The entitlement name needs to be in the provisioning plan (I assume that the operation will reference the ‘ASSIGN’ provisioning plan on the source - Create Provisioning Plan).
In the provisioning plan:
- I cannot use a transform to get the entitlement name.
- A ‘Web Services Before Operation Rule’ is a connector-executed rule that runs on the VA and cannot query IDN.
- The function ‘entitlementDescription’ available in IDNRuleUtil appears to be applicable to account creations only and requires searchable identity/account attributes - IDNRuleUtil
-
Are there other options available to achieve this or is a custom connector required?
-
If I were to use an identity attribute that is comma delimited to appear to be multi-valued (since the account schema attribute is multi-valued and is an entitlement with it’s own entitlement schema) and enable an attribute sync for this attribute, will the ‘Add entitlement’ operation attempt to add each value separately?
-
I can make the entitlement name the entitlement ID as this will always be unique however can the entitlement ID be referenced in a plan as a reserved keyword such as ‘$plan.groupID$’ for example?
Thank you