Update an AD account attribute only in Sailpoint while creating new account

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

8.3

Share all details about your problem, including any error messages you may have received.

*Hi, We have declared an attribute(isPrivileged) in our Active directory application to identify the account Privileged or not based on certain logic. This attribute does not exist in Target. Once the ProvisiongResult is commited, I want to update the attribute only in Sailpoint. I am adding this attribute to the existing account request in After Provisiong rule as below, but its not working.
Please suggest any workaround to do this.

List newAttrRequests = new ArrayList();
for(AttributeRequest tempAttr: attrReqList){
newAttrRequests.add(tempAttr);
}
newAttrRequests.add(new AttributeRequest(“isPrivileged”, ProvisioningPlan.Operation.Set, “True”));
accReq.setAttributeRequests(newAttrRequests); *

2

Hi, On which basis you are marking as privileged account in Sailpoint? use account mappings to mark as privileged.

3

We are checking based on the entitlement being assigned to the account. If the entitlement is marked as Privileged then the account would be Privileged

4

@sahoos9

Please add the attribute to application xml in below tag and validate if this fixes your issue

<entry key="excludeAttributesFromProvisioning">
  <value>
    <List>
      <String>isPrivileged</String>
    </List>
  </value>
</entry>

Please mark the solution if this resolves your issue

1 Like
5

There is one more option you can try,

You can use the displayOnly option in the Provisioning Policy Field

Source : Solved: Removing attributes from Provisioning Plan - Compass

1 Like
6

Awesome, it works. Thank you very much

7

@sahoos9
FYI, Display only works if the attribute is part of your provisioning policy but if you are setting this specifically during before provisioning rule and not part of your provisioning policies , you should go with excludeAttributesFromProvisioning

8

Nice, you can choose whatever best for your requirement. good luck !

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.