Sailpoint "Services Standard Before Provisioning Rule" xml

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello,

By the chance, has any one have the Sailpoint “Services Standard Before Provisioning Rule” in xml format ?

Thanks.

2

I never heared of any such rule so curious can you please explain your ask a litle like where are you trying to add the rule, for which coI haven’t come across a rule by that name before, so I’m curious to know more. Could you share a bit more detail about what you’re trying to do? Specifically: where are you looking to add the rule, which connector is it for, and what are you trying to achieve? That’ll help me point you in the right directionnnector and what are you trying to achive

3

Hi @smandal , this can help you understand about this rule

4

The Services Standard Before Provisioning Rule is a cloud-executed rule managed by SailPoint. It allows you to intercept and modify ProvisioningPlans before they are sent to downstream connectors. Common actions include scrambling passwords, moving Active Directory (AD) OUs, and stripping entitlements during offboarding. [1, 2, 3, 4]

5

  1. Use SP-Config APIs to export the tenant Service Standard Before Provisioning Rule

  2. Unescape the “script” part of response inside “sourceCode”

  3. Use below template :

    image
    image769×258 20.3 KB
    4. Put the unescape script from step 2 under source

6

Hi @smandal

As explained above by @SatishAtike , this is a Generic Before Provisioning Cloud Rule developed by SailPoint. Once it is deployed in your tenant, you can configure provisioning behavior directly on your sources without implementing any custom logic.

For example you can configure actions such as:

  • For Active Directory, Moving an account to a different OU during a mover process.
  • Removing attribute values.
  • Altering provisioning operations (for example, converting a Disable operation into a Delete).
  • Many other provisioning-related actions.

This allows you to implement complex provisioning behavior through configuration, avoiding the need to develop and maintain your own custom Before Provisioning rule.

This rule was originally created for training purposes. Before deploying it in a tenant, you should consult SailPoint Expert Services to ensure it is appropriate for your environment.

I have used this rule in several projects. However, I no longer have the XML version, which is why I asked if anyone could share it.

Thanks

7

Rule - BeforeProvisioning - Services Standard IdentityNow BeforeProvisioning Rule.xml (33.3 KB)

Here is the version I have been using. You will have to submit a request to SailPoint to deploy this rule just like any other cloud rule.

8

When I download this file and put it through the rule validator it fails. What changes do I need to make it wor?

9

Hello @lsteuerTD

You can copy paste the beanshell code part from here Services Standard Before Provisioning Rule - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community or just add import part

The validator failed for me too and its seems like it was linked to missing import.

Thanks

10

That was the trick - adding the imports. Not sure who can add them to the downloadable rule. We are all set now. Thanks!