Transform Inquiry

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Is it possible to create below transform for HR source and SailPoint ISC aggregation?

  1. Create a transform to set lifecycle state = “Active”, if all mandatory attributes are filled and no value is NULL
    else
    Set lifecycle state = “Invalid”

  2. Transform 2: Manager check?
    Create a transform to validate user’s manager. If manager is CEO or Franchisee owner, set user as self manager

2

Hi @TJ1331 ,

Here are two working Velocity transform examples for SailPoint ISC aggregation based on your requirements:

  1. Lifecycle State Transform:
    Sets lifecycle state = “Active” if all mandatory attributes are filled (not null/empty), else sets it to “Invalid”:

#if ($MandatoryAttr1 && $MandatoryAttr2 && $MandatoryAttr3)
Active
#else
Invalid
#end

Replace MandatoryAttr1, MandatoryAttr2, MandatoryAttr3 with actual attribute names from your HR source.

  1. Manager Check Transform:
    Checks if the user’s manager is CEO or Franchisee Owner; if yes, sets the manager attribute to the user itself (self manager):

    #if ($manager == “CEO” || $manager == “Franchisee Owner”)
    $self
    #else
    $manager
    #end

Replace $manager with the attribute that stores the manager’s role or name. $self refers to the user identity itself.

These transforms can be applied during aggregation in the Identity profile mappings to dynamically set lifecycle state and validate manager assignment.

3

Thank you. And, for the first one, if user goes to “Invalid” state, we can have an email notification triggered as well, right?

4

Yes, you can trigger an email notification in SailPoint when a user’s lifecycle state changes to “Invalid.” Simply enable the built-in “Lifecycle State Change” email notification in the identity profile settings. You can customize the recipients and email template as needed to notify relevant parties automatically.