SailPoint IIQ - Help Reading/Aggregating in Array List

[itzsam91 (Sam Le)]

Which IIQ version are you inquiring about?

8.3p3

Please share any images or screenshots, if relevant.

Identity Mapping Screenshot:

accountFlags AD attribute with values:

Share all details about your problem, including any error messages you may have received.

Hi there, I’m attempting to read in a value from AD. The attribute is called “accountFlags” which is holding multiple values via an array list.

How do I write that in a rule, to pull in all values of the array list, then search for syntax match for one of the values above to throw in a boolean?

For example purposes (not a real scenario), get identity’s accountFlag array list → Search for value of “User Account is Disabled” → if match is found, set boolean disabledUser = true…

[vishal_kejriwal1 (Vishal Kejriwal)]

I think userAccountControl attribute would be the right value . and this value define the accountflags and account status .

[itzsam91 (Sam Le)]

Right, but we’re looking to utilize separation of SVC account’s as our AD OU repository is quite messy.

I used the account disabled as an example, but that scenario is not real hence trying to isolate the values from the Array.

Basically, what we’re really after is if we can check for “Password Cannot Expire” Is it possible>?

[vishal_kejriwal1 (Vishal Kejriwal)]

check

UserAccountControl property flags - Windows Server

[itzsam91 (Sam Le)]

Thank you! Appreciate it.