Sailpoint ISC WebServices SaaS Update

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello,
I am trying to sync attributes for a webservices SaaS source.

Created -
*UPDATE provisioning policy to populate all the attributes that are enabled for sync.

*In HTTP-OPERATIONS, UPDATE type, fetching all attributes passed from the plan using “value”: “$plan.attributeName$”

Problem: If only 1 attribute is updated then rest of the attributes gets overwritten with “value”: “$plan.attributeName$”.
Somehow UPDATE provisioning policy is not triggered and it only passes the attribute which was changed and for rest it sets it as “$plan.attributeName$”.

2

Please check if you necessary condition checks are enabled for the attributes,

3

Plan have only attributes that are changed, remaining attributes will be filtered.

4

All attributes are marked as required, but in the log I see only the changed attributes being passed and UPDATE prov policy is not getting called so unchanged attributes gets overwritten with “$plan.attributeName$”.

5

Correct, so how to resolve it..with onprem connector, I can add it in rules but with SaaS customizers, it does not have that option..so in the http operation ‘Update’, rest of the attributes gets the value “$plan.attributeName$”

6

Can you raise a ticket for this?

It would be good if ISC had an option to pass required attributes, even if they are not updated.

I found a workaround for this, which is for Update Provisioning policy to have different attribute names (eg dummyAttributeName), then use $plan.dummyAttributeName$

e.g.
Map firstName to dummyFirstName in Update Policy, then reference dummyFirstName. It should then be available even if first name wasnt updated.

Hope this makes sense