Transform to detect a change on attribute

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello Developer community,

I am trying to find out a way to use the OldValue attribute in conjunction with the now variable to detect a name change and set a timestamp on it.

The concept:
User changes their lastName
The attribute ‘Name change date’ detects that this has changed comparing it to old value.
If the value is the same do nothing, if it is different, put ‘now’ with a format of dd/mm/yyyy.

Ideas?

2

Hi @dgomez,

If you are trying to detect changes on identity attributes, like “lastname”, then the Identity Attributes Changed event trigger does just that. You will get real-time notifications in your app anytime an identity changes, and you can even set up filters to only be notified when certain attributes have changed.

3

Hi @colin_mckibben,

Event Triggers is not a possible solution for the environment we are in, we would want to keep it internal to IDN, technically this should be feasible, but there is not that much value I can get from the docs regarding the use of OldValue and current value on transforms.

4

I need a little more information about your use case and what you want to accomplish to better help you.

Is it accurate to say that you want to detect when the lastname attribute has changed, and you need the solution to be implemented within IDN? Is this an account or an identity attribute? What action(s) do you need to perform if the lastname does change?

5

lastName would be an Account Attribute and an Identity Attribute, I would think that OldValue can only reference Identity Attributes, hence my question on Identity Attributes only, but further information about its usage would be of great value, as I am unable to find anything on Compass.

The use case is that I want to be able to see the date of when a change on this attribute occurred (on a different identity attribute, e.g. Last_Name_Last_Changed), so then I can go to Search and see all the users that have had their name change over the last month. There are several possible uses cases for this, from auditing to triggering certification campaigns.

6

Can you check out this compass article and let me know if that helps? There is a sample JSON body to be used with the transforms endpoint in the form of:

{
    "attributes": {
        "input": {
            "attributes": {
                "ignoreErrors": "true",
                "values": [
                    "$oldValue",
                    {
                        "attributes": {
                            "attributeName": "country",
                            "sourceName": "Flat File"
                        },
                        "type": "accountAttribute"
                    },
                    "none"
                ]
            },
            "type": "firstValid"
        }
    },
    "id": "testing",
    "type": "lower"
}
7

Hi Colin,

We have a similar use-case wherein we would like to get the events or account activity of identity attributes change.

Currently, using search feature we can find the events of attribute sync to end target systems. Similarly, we would like to get the events of identity attribute changes. Additionally, we would like to inform you that event triggers is not a feasible solution for our tenant. Therefore, is there any possibility to get the identity attribute changes from search instead of transforms and event triggers.

Thank you.

8

Hi @shanmukh.gali ,

Can you please create a new topic for this so we can track the solution to your specific request?

Thanks,
Colin

9

Hi Colin,

Sure. I will create a topic for my request.

Thank you.