SCIM API filter inactive accounts

IdentityIQ (IIQ) IIQ Discussion and Questions
1

I want to filter out inactive accounts when calling the Accounts endpoint:

/Accounts?filter=active%20eq%20%22true%22

It gives the following error message:

could not resolve property: disabled of: sailpoint.object.Link

The filter works fine on \Users.
Any pointers what I need to change? Anything I can do in the SCIM configuration object?

2

Based on the error, it looks like you must have a searchable extended Link attribute called “disabled” (or perhaps “active”…?)

3

To me it looks like it’s internally trying to compare on the link property “disabled” but for some reason it’s not working.

The link object looks like that:

<Link created="1608220960660" disabled="true" displayName="apacheds" entitlements="true" id="c0a80103763c1f028176717067941984" lastRefresh="1608220960660"...

The SCIM configuration object looks like this:

<SchemaPropertyMapping urn="urn:ietf:params:scim:schemas:sailpoint:1.0:Account">
<AttributePropertyMapping name="active" property="disabled" queryClass="sailpoint.service.scim.GenericFilterModifier"/>
...