Transform Issue

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Team, Here I tried to create one transform for one of the attribute for Entra-ID but it is throwing error, request got failed when I tried to provision for one of test-account when I checked the account activity, I saw value where my custom transform being used in the value is not being passed into account attribute where my custom transform is being used, Same transform I used in ID profile it worked fine, Now I am wondering what wrong is In this transform for provisioning.

I am trying to get [email protected]

‘All into lower’

“transform”: {
“type”: “lower”,
“attributes”: {
“type”: “concat”,
“attributes”: {
“values”: [
{
“attributes”: {
“name”: “firstname”
},
“type”: “identityAttribute”
},
“.”,
{
“attributes”: {
“name”: “lastname”
},
“type”: “identityAttribute”
},
“@DemoExample.com”
]
}
}
}

if you find any issue here, Please post your comnment

2

Hi Gagan, It seems like U are using the custom transform for the UserPrincipalname filed, instead of that why don’t u use the generator Create Unique Account ID with pattern $(firstname).$(lastname)$(uniqueCounter)@yourdomain.onmicrosoft.com

3 
{
    "type": "lower",
    "attributes": {
        "input": {
            "type": "concat",
            "attributes": {
                "values": [
                   {
                       "type": "accountAttribute",
                       "attributes": {
                           "sourceName": "HR Source",
                           "attributeName": "firstname"
                       }
                   },
                   ".",
                   {
                       "type": "accountAttribute",
                       "attributes": {
                           "sourceName": "HR Source",
                           "attributeName": "lastname"
                       }
                   },
                   "@DemoExample.com"
                ]
            }
        }
    }
}

Do not use Identity attribute type Transform

1 Like
4

Thanks for your suggestion but here I have to use lower case for user principal name consist of firstname and lastname everything in lower case

5 
{
    "type": "lower",
    "attributes": {
        "input": {            
            "type": "concat",
            "attributes": {
                "values": [
                    {
                        "type": "identityAttribute",
                        "attributes": {
                            "name": "firstname"
                        }
                    },
                    ".",
                    {
                        "type": "identityAttribute",
                        "attributes": {
                            "name": "lastname"
                        }
                    },
                    "@demoexample.com"
                ]            
            }
        }
    },
    "name": "ID Generator Transform"
}

Try the transform above.

Ideally you shoud be using the "Username Generator | SailPoint Developer Community transform along with uniqueCounter for this.

1 Like
6

Thanks Krishna, but here I am using this transform for provisioning, as per documentation what I understood that it can only access Identity attributes, Anyways when I tried the exact transform it worked.
Thanks Krishna :slight_smile:

7

Thanks @sharvari it worked!, now provisioning got successful, what I missed in my transform input { , I am not sure why do we need to add input here if we are directly taking values from identity attribute not specifically mentioning anything in inputs. May be I need to do more readings on understanding Implicit and Explicit inputs, Thanks a lot Sharvari :slight_smile:

1 Like
8

Yes, I missed it, indeed it is at Provisioning side.

At Identity Profile side, you should not use Identity attribute transform, at provisioning side, you can.

You should use Generator for uniqueness.