SAP GRC - Access Management integration : Update provisioning policy vs attribute sync

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

We have use cases to implement like modify attributes ( Modify first name, last name, email and etc), user id change ( rename user id on SAP account), delete account on termination ( lock account, remove roles and update valid to ), can you please help us whether these are achieved with provisioning policies or attribute (OOTB configuration or custom code require). AS these are not working as expected, please help us any documentation will be much appreciated

same things can be achieved in different ways , but as a best practice

Attribute Sync is used to sync value in target system , you can have some transformation logic too. if any of the identity attribute changes and you want to push those value to target , Attribute sync is the option .

Provisioning policy is used to pass in target system as a part of the LCE , suppose you want to pass few attributes value as part of joiner/ termination or any LCE , you can create similar type of provisioning policy .

Hi and Hello,
I find also this document

Regards,
Adam

Hi Adam, no detailed info in document, can you please share if you have any provisioning plan or detailed document for enable, disable and change & enable and change & disable use cases, it will be help full

Thank you

Hi Vishal, we are using attribute sync for modifications on identity attributes. however we have additional use cases to remove last role and disable account and enable when role is added. can you please share if there is any detailed docs or provisioning plan

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.