Transform to get a managers UPN

[baoussounda (Ousmane N'DIAYE)]

In this rule in the uid attribute you must have normally a value of uid attribute of an identity. But Sailpoint give a special key “manager” for reference automatically identity Manager and get attribute specified in key attributeName.

In your case as @jesvin90 say be sure that manager correlation is define in your auhorative source. Because by defining in Identity Profile i don’t think the manager will be promote.

For example if you test :

 {
                    "type": "rule",
                    "attributes": {
                        "name": "Cloud Services Deployment Utility",
                        "operation": "getReferenceIdentityAttribute",
                        "uid": "yourUid",
                        "attributeName": "upn"
                    }
                }

By replacing yourUid by an harcoded uid it’s will work.

You can also get your identities by using search-post | SailPoint Developer Community :

{
  "query": {
    "query": "*"
  },
  "sort": [
    "id"
  ],
  "indices": [
    "identities"
  ]
}

And looking if “manager” object are populated for an identity. If manager object not exist or is null that mean you not really reference the manager as Identity object but only the string with format “Firstname lastname (email)” you must then define a manager correlation rule in your authorative source. And your transform will be work with :

{
                        "name": "Cloud Services Deployment Utility",
                        "operation": "getReferenceIdentityAttribute",
                        "uid": "manager",
                        "attributeName": "upn"
                    }

[ipobeidi (Ivan Obeidi)]

For the trasnform to work , you need to have a field in the identity with the UPN in it .

Create it and the transform should work.

[KRM7 (Krishna Mummadi)]

This is a very simple requirement, something is missing here. Let’s not complicate this

1. Manager correlation
2. UPN identity attribute

If you have manager correlation and is working fine, if you already created UPN identity attribute which is reading either mail or userPrincipalName from AD then by using reference identity attribute Transform we can get any identity attribute of manager not just upn.

Thanks
Krish