Segments in Identity Security Cloud

[kani1 (kanibharathi M)]

Hi All,
In segments, i need to add more than one value for the attributes, eg country - srilanka, India, Thailand etc. how to add these criteria in segment.

[gmilunich (Geoff Milunich)]

I don’t think you are able to add more than one criteria per identityAttribute with the current model, since once you select an IdentityAttribute, it is removed from the select list. This is because the segment Identity Criteria only supports ANDed values.

I don’t know if this is the intention, and the documentation does not specify one way or the other.

What you may have to do as a work around is define a segment for each of the Identity Criteria values and add the remaining details necessary to all these segments. This is a lot of duplicated effort, but should work for what you need. Downstream, I am not sure how this will affect reporting, but Access Requests should still work.

[shaileeM (Shailee Mehta)]

Agree with @gmilunich , only ANDed Criteria are allowed on Segments.

However, I did a small test via patch-segment | SailPoint Developer Community to use the sane IdentityAttribute and surprisingly it is allowed, but with operation AND (Ofcourse, I understand it won’t help in your use case)

PATCH 'https://<tenant>.api.identitynow-demo.com/beta/segments/<segment-id>' \
--header 'Content-Type: application/json' 
--header 'Accept: application/json' 
--header 'Authorization: Bearer <token>' 
--data '[
    {
        "op": "replace",
        "path": "/visibilityCriteria",
        "value": {
            "expression": {
                "operator": "AND",
                "children": [
                    {
                        "operator": "AND",
                        "attribute": "country",
                        "value": {
                            "type": "STRING",
                            "value": "India"
                        }
                    },
                    {
                        "attribute": "country",
                        "value": {
                            "type": "STRING",
                            "value": "India"
                        }
                    },
                    {
                        "attribute": "country",
                        "value": {
                            "type": "STRING",
                            "value": "SriLanka"
                        }
                    }
                ]
            }
        }
    }
]'

Thanks,
Shailee