Trying to create displayName for okta through create account profile (using transform)

[sahil_talathi]

Hello Everyone,

I’m trying to create displayName in okta through create account profile using transform. so, I just created this transformation but it only sets displayName from Target_Active Directory. Need help regarding this.

 {
   "attributes":{
      "cloudMaxSize":"20",
      "cloudMaxUniqueChecks":"50",
      "cloudRequired":"true"
   },
   "isRequired":false,
   "multi":false,
   "name":"displayName",
   "type":"concat",
   "transform":{
      "attributes":{
         "sourceCheck":true,
         "values":[
            {
               
                  "type":"accountAttribute",
                  "attributes":{
                     "attributeName":"displayName",
                     "sourceName":"Target_Active Directory"
                  }
               
            },
            {
              
                  "type":"accountAttribute",
                  "attributes":{
                     "attributeName":"sn",
                     "sourceName":"Target_Active Directory"
                  }
               }
            
         ]
      },
      "type":"firstValid"
   }
}

[MVKR7T (Krishna Reddy Mummadi)]

Hi @sahil_talathi

Welcome to SailPoint developer community.

Your Transform type is firstValid which extracts

• displayName from Target_Active Directory
• sn from Target_Active Directory

It considers which is ever valid.

firstValid transform is just like if-else. The equivalent will be

if displayName is not null then return displayName
else sn even if it is null

That is why displayName from AD is set.

I believe you have displayName identity attribute. Just select that in your Okta create account provisioning form as below.

[sahil_talathi]

Hello @Krishna Mummadi

Thank for replying. Actually my requirement is I have to take one value from Identity attribute and one from Account attribute. How can I do it in given json.

[MVKR7T (Krishna Reddy Mummadi)]

Not sure what is your requirement exactly, here are some reference solutions. You can do a small change if required as per your requirements.

Supply below attribute definition in your create account provisioning policy form for display name attribute.

1. First Valid Transform

This Transform gets displayName identity attribute first if available, if not then displayName from AD.

{
    "name": "displayName",
    "transform": {
        "attributes": {
            "values": [
                {
                    "attributes": {
                        "name": "displayName"
                    },
                    "type": "identityAttribute"
                },
                {
                    "attributes": {
                        "sourceName": "Target_Active Directory",
                        "attributeName": "displayName"
                    },
                    "type": "accountAttribute"
                }
            ]
        },
        "type": "firstValid"
    },
    "attributes": {},
    "isRequired": false,
    "type": "string",
    "isMultiValued": false
}

2. Concatenation Transform

Below Transform concat firstName identity attribute and sn from AD.

{
    "name": "displayName",
    "transform": {
        "attributes": {
            "values": [
                {
                    "attributes": {
                        "name": "firstName"
                    },
                    "type": "identityAttribute"
                },
                " ",
                {
                    "attributes": {
                        "sourceName": "Target_Active Directory",
                        "attributeName": "sn"
                    },
                    "type": "accountAttribute"
                }
            ]
        },
        "type": "concat"
    },
    "attributes": {},
    "isRequired": false,
    "type": "string",
    "isMultiValued": false
}

[sahil_talathi]

It’s working.Concatenation Transform working properly as per my requirement. Thank you so much for your help.