Required Attribute

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I need to require an identity profile attribute have a value before I allow creation of an account in a source. Is there an easy way to do this?

2

@mikemeyer

You can change your source’s provisioning policy and apply the following transform to the account attribute you want the value for.

Here is the API to modify the provisioning policy

{
  "attributes": {
    "values": [
      {
        "attributes": {
          "name": "email"
        },
        "type": "identityAttribute"
      },
	  "Default Value"
    ]
  },
  "type": "firstValid",
  "name": "First Valid Transform"
}
3

If I’m not mistaken this will set a value for “Default Value” if the email is not present. I want to completely stop the entire create from happening if the identity attribute is not set yet.

4

@mikemeyer
I misunderstood the requirement.

How is the account being created?

If you are using LifecycleState to create the account, then you can adjust the value of it to reflect the value of your unique identity property.

The above approach will not work in case of access request.

The only way I can think of is to use Before Provisioning Rule

1 Like
5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.