SailPoint IIQ - Help Reading/Aggregating in Array List

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

8.3p3

Please share any images or screenshots, if relevant.

Identity Mapping Screenshot:

image
image785×419 14.4 KB

accountFlags AD attribute with values:
image

Share all details about your problem, including any error messages you may have received.

Hi there, I’m attempting to read in a value from AD. The attribute is called “accountFlags” which is holding multiple values via an array list.

How do I write that in a rule, to pull in all values of the array list, then search for syntax match for one of the values above to throw in a boolean?

For example purposes (not a real scenario), get identity’s accountFlag array list → Search for value of “User Account is Disabled” → if match is found, set boolean disabledUser = true..

2

I think userAccountControl attribute would be the right value . and this value define the accountflags and account status .

3

Right, but we’re looking to utilize separation of SVC account’s as our AD OU repository is quite messy.

I used the account disabled as an example, but that scenario is not real hence trying to isolate the values from the Array.

Basically, what we’re really after is if we can check for “Password Cannot Expire” Is it possible>?

4

check

image
image1664×514 25.9 KB

5

Thank you! Appreciate it.