Single account aggregation not working for JDBC type application

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , ,
1

Hi Team,

I am facing issue for single account aggregation.

  1. Application Type: JDBC

  2. Table: TestDB.eCard

  3. Identity Attribute: CARDID

  4. Get Object Query:

    SELECT * FROM TestDB.eCard WHERE CARDID='$(identity)'

I have updated the JOBGROUP value in the database from ‘TECH’ to ‘ADMIN’. After that, I performed a single account refresh from Manage Accounts.

In the logs, I can see that the updated value (ADMIN) is being fetched correctly in the ResourceObject. However, in the SailPoint UI, it still shows the old value (TECH), and the account attributes are not getting updated.

Could you please help me understand why the updated values are not reflecting in the UI, even though they are visible in the logs?

Any suggestions would be appreciated.

<!DOCTYPE ResourceObject PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<ResourceObject displayName="114" identity="114" objectType="account">
  <Attributes>
    <Map>
      <entry key="CARDID" value="114"/>
      <entry key="EMAIL" value="Melissa.Bailey@demoexample.com"/>
      <entry key="JOBGROUP" value="ADMIN"/>
      <entry key="STATUS" value="active"/>
    </Map>
  </Attributes>
</ResourceObject>

Refreshing_User_From_Manage_Accounts

Table_Data
Table_Data547×115 16.4 KB

Data_in_Sailpoint
Data_in_Sailpoint850×454 8.84 KB

2

@SDM007 Could you please check in debug as well? what value is it showing? Sometimes, it aggregates but doesn’t reflect immediately in UI.

3

Yes, I checked on debug page also it’s same old value

4

Do you have a customization rule configured for this application?

5

Yes, I have configured customization rule

6

Can you share your rule?

7 
log.error(object.toXml());

String st = object.getStringAttribute(“STATUS”);
String cardid = object.getStringAttribute(“CARDID”);

log.error(st + " " + cardid);

if (st != null && st.equalsIgnoreCase(“active”)) 
{
object.setAttribute(“IIQDisabled”, false);
} else {
object.setAttribute(“IIQDisabled”, true);
}

return object;
8

Is JOBGROUP the entitlement attribute on this application? and was this account provisioned by IIQ with some sort of access request or role assignment?

9

if you have checked the debug and there also it is showing the old Value , can you please login to sailpoint db and check.

The issue could be related to cache, can you open debug and clear cache, and also refresh the user.

10

Jobgroup is not marked as managed and entitlement

11

I cleared cache from debug page still the result is same

12

did you refresh the user?? and checked at the db end, also if there you can see the updated value.

13

@SDM007 Even i tried in Manage Accounts, it’s not syncing the user. I don’t exactly remember when i last used it and even it is working or not. As a workaround, we added a plugin to do single account aggregation. May be you can also try the same.

1 Like
14

have you tried Identity Refresh task to refresh account attributes ?

15

Hi @SDM007,

I think for getObjectSQL you can use:

SELECT * FROM TestDB.eCard WHERE CARDID = ‘James.Bond’;

For single account aggregation, we need to select it like this. Please try this way and let us know

image
image494×142 3.16 KB

16

Yes I tried , still it is same this way

17

But then with this we cannot do single account aggregation for other user

18

Hello @SDM007

Verify that the JOBGROUP attribute is marked as Managed.

Check for any cache-related issues and refresh the identity if required.

Ensure that attribute synchronization is enabled (it is currently disabled).

19

Yes, at that time we need to change the user. But how are you doing single account aggregation? You mentioned using the Manage Accounts option

image
image1576×382 21.7 KB

is that what you are using?

20

To perform single account aggregation, we have a rule that might help you. I have attached the rule below. If it is helpful, please proceed; otherwise, you can ignore it
Demomstrate Single Account Aggregation.xml (5.0 KB)

1 Like