Unique Sequential ID Creation in Create Account Policy

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
21

Hi @Peddapolu WADR, I’m not sure you understand the ask here.

22

Hi @Peddapolu, if we are using the pattern mentioned by you, it is going to append the counter with the value (for this use case, uidnumber is a number) instead of incrementing it. This is my understanding. Please correct me if I am wrong.

23

Thank you for the approach, @KRM7. Yes, uidnumber is just a number.

Last time I used API calls in cloud rule, it did not work as expected. I used the WebServicesClient class to call a SailPoint API. I would love to know if there’s any working example for this.

24

Hi @shyam_sreevalsan

If you’re going to use APIs in the Cloud Rule, can I suggest another approach (Untested, provided as-is):

Create a custom connector attribute on the source, say “nextUID” or some such. Populate it with the next UID sequence number.

In the before provisioning rule use this for your UID.

Then increment it and write it back to the connectorAttribute.

Constraint: as it is not an after create rule, a failure in the provisioning would cause a gap in the sequence.

Inspiration (admittedly a Connector Rule): How to obtain all accounts of an application? - #8 by tamalika01

25

Thanks @j_place, this is also a good approach. We could also check for uniqueness and increment, if existing in the source, before updating nextUID.

These approaches might still fail if accounts are created out of SailPoint and the latest aggregation has not picked up them.

26

Hi @shyam_sreevalsan You can do a source uniqueness check with LDAP connectors to catch that.

27

Hi Krishna,

Thank you for sharing the correct rule guideline.

Could you please confirm if we can take above approach to build BPR and can do ISC acoounts endpoint API call in the rule.

Thanks,

Santosh Agrawal

28

WebServiceClient is available in connector library, I am not sure why it didn’t work in cloud Rule, can’t say that it will work only in connector Rules.

Do you have this UID attribute as Identity attribute.

29

I have never made API calls in BP Rule, so I cannot comment from my experience, but I have nor read anywhere that you cannot do, I have seen other experts doing that. Sp, give it a try.