Update attributes on authoritative source

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi,
I’m looking for documentation and guides for how to set up attribute sync on an authoritative source but are having trouble finding any information of how to do it.
We read attributes from the auth source but for some of the attributes, if they are empty, we will trigger a creation of the value for the attribute. We then want to write it back to the authoritative source. We are using the standard Web service connector.

As I understand it you should set it up under Accounts → Attribute Sync on the source. But since we do not create accounts on the source there are no attributes to choose from in that view. Someone said that this could be solved with the help of the Sailpoint ISC API. But how?

Thankful if you could point me in the right direction =)

3 Likes
2

Hi @iamjenny ,

Try using transforms (FirstValid) →

There are many transforms available. For your reference, you can see that using Transforms | SailPoint Developer Community

Also, if the problem is really cannot be achieved using transforms, you can write rules - Identity Attribute Rule | SailPoint Developer Community or Transform Rule | SailPoint Developer Community

Thanks!!

2 Likes
3

Hi @iamjenny,

Do you have update user account API of your authoritative source. then configure http update account operation in authoritative source for write back.

Write a Webservice Before Operation and validate attributes requested for write back. if any attribute value getting null for write back or update account then ignore that, and which attribute contains values update only those attributes.

Thank You.

1 Like
4

Hi @iamjenny,

You can ‘side-load’ attributes to sync using this API call from the beta set:
{{baseUrl}}/sources/:id/attribute-sync-config.

Just add what identity attribute and source attribute you want to sync:

        {
            "enabled": true,                            
            "displayName": "Roles",               <= Identity Attribute
            "name": "roles",                      <= (identityAttribute)
            "target": "extensionAttribute10"      <= source attribute
        },

Hope this helps
Phil

1 Like
5

Great! Thank you, just what I was looking for =)

1 Like
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.