We have a requirement where we are creating Non - Employees as People profile. We want to import all the employees also in NERM so that we can assign employees as manager to Non - Employees. We also want that managers can login into NERM portal to manage non - employee lifecycle. How can we achieve…

You can use the /user api to create user records along with the ‘group_strings’ value for them that maps to the roles they should have when they login via SSO. You can do this via a webservices connector from IIQ or ISC too! POST:/api/user { "user": { "type": "NeprofileUser", "name": "…

Hi @DerekHackbardt , In my client’s scenario, I have both NERM instance and a IdentityNow instance. The way SailPoint had setup the SSO by default is that IdentityNow has been setup as Identity Provider for NERM. So the directory group related attribute in NERM roles needs to be mapped with “Groups…

If you are using an IdP, the groups need to be provided by the IdP in the assertion. If you are using ISC local accounts, then you need to directly assign users to roles in NERM (via API) then those should be retained when logging in – except for users with ORG_ADMIN, they will always just have the …

Thanks for the response @DerekHackbardt . In my case, we would not create local users in NERM, instead the system users in NERM would always come in via SSO. So if I understand it correctly, for any user coming into NERM via SSO (where IdentityNow is the IdP), I can still use the /api/user_role API…

If the users are coming through an SSO connection, the user_role method should work if your IdP is NOT sending anything in the groups assertion attribute. Information in the groups assertion will always be treated as authoritative and overwrite any direct role assignments to users.

Hello. Recently we started NERM implementation and I found your insights very helpful, since we’ve also face some difficulties. In our case we use ISC as Idp, but even when an ISC ORG_Admin signs in NERM, he does not have admin permissions within NERM (Admin option is not available at all). Do yo…

Let me try this once more and see if it gets cleared up as part of daily refresh and will get back to you. Also @DerekHackbardt , on a side note, If I’m creating users in “System” > “Users” section, using a CSV import, how can I enable login capability into NERM system for such users?

All users into NERM must login through the SSO connection. So you can pre-create them in NERM, but they need to authenticate through SSO.

Hi, everyone I have been testing the import of users in NERM. I see that when I import users in a profile type, it does not let me edit their attributes in NERM unlike the profiles I created from a workflow. Is there any way to edit these attributes?

User Import in NERM

Identity Security Cloud (ISC) ISC Discussion and Questions

ajmerasunny (Sunny Ajmera) March 7, 2024, 7:24pm 2

see if this helps. You will have to create profile for employee first with all the attributes an then you can import all the employees in NERM.

Non-Employee Data import to NERM system from a third party Vendor - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community Forum

Topic		Replies	Views
Non-Employee Data import to NERM system from a third party Vendor ISC Discussion and Questions nerm	4	893	March 17, 2024
What is the best way to assign roles to users in NERM? ISC Discussion and Questions identity-security-cloud , nerm	14	1124	June 28, 2024
NERM Import Portal Users ISC Discussion and Questions identity-security-cloud , nerm	7	197	July 21, 2025
NERM:: Users cannot be provisioned the sponsor role without APIs ISC Discussion and Questions identity-security-cloud , roles , nerm	7	215	January 16, 2025
NERM authentication: IdentityNow tenant requirement + SAML 2.0 PingOne IdP with group-to-role mapping ISC Discussion and Questions identity-security-cloud , nerm	4	48	March 29, 2026

User Import in NERM

Related topics