Set status column for an application to be NA by default

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.4P3

Share all details about your problem, including any error messages you may have received.

Hi all,

I have a LDAP application and I want to show the status to be NA for all the application accounts by default is there any way I can do so?

2

Hi @shijingg

You can easily achieve this by populating the attribute to the default value using Account Customization rule. Create a customization rule and map it to your application with a code similar to this, this ensures your resourceObject(account) is updated with the STATUS attribute as part of the aggregation task

if(object != null){
	object.setAttribute("STATUS","NA");
}
return object;

Regards,
Uday

3

Hello! Can I know where to attach the customization rule in the application xml? Thank you for your quick response!

4

Here is where you can add one:

image
image1497×904 41.7 KB

5

Hi @shijingg

If you have created a status schema attribute then you can create a customization rule and set the status value to be NA irrespective of any condition. This will set the status as NA for all the resourceobject.

Thanks

6

Customization Rule should be the easiest way here.

7

Hi all, it does set a status attribute as NA in my schema but it does not reflect in this column in the Accounts tab in my application. Am I missing something? Or this status is controlled by iiqDisabled attribute and it cannot be NA?

image
image631×148 6.2 KB

image
image338×405 5.11 KB

8

Yes, the status(active/inactive) of the account is completely determined by IIQDisabled attribute for LDAP connector.

Customization rule can also be used to populate IIQDisabled attribute based on your logic, when the value is true, the account will be displayed as disabled(inactive)

9

Hello! But for iiqdisabled from what I read it can only be true/false and not other values right?

10

Yes, that’s correct. Purpose of IIQDisabled attribute to display the status of the account on the UI, which can be only two possibilities i.e., Active (Green), Disabled (Red).

Though your actual status attribute can be more than one value, logic on IIQDisabled should only be leading to either true or false based on the status attributes.

11

status is mainly controlled by IIQDisabled flag value. If it is false, then account is active and if it true then it means account is inactive.

Here, status value is NA that is a custom schema attribute, and it cannot reflect the inactive/active in account status.