User or identity not in authoritative source, does it create downstream account?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

When identity is not part of authoritative HR source does ISC creates downstream account? this process is confusing kindly help on this

2

Can you tell us more about your use case?

3

Hi Shafuu,
If an employee’s identity information is not present or updated in the HR source, SailPoint does not automatically create downstream accounts. Instead, it waits for the HR system to update its records. It relies on the HR source as the trusted provider of employee data.

3 Likes
4

Hi @anagha ,

Can you elaborate downstream accounts? I am assuming that you mean certain birthright target accounts. If that understanding is correct, yes it needs an identity to be created to assign the birthright roles and identity can only be created from an aggregation of authoritative source.

If it is a non-employee record, you can also add the record in Non-Employee source in IdentityNow and define IdentityProfile for Non-employee such that the identity is created.

Regards,
Uday Kilambi

1 Like
5

Hi Shafuu,

SailPoint will use only the correlated accounts to do any kind of provisioning to downstream applications and it will ignore the uncorrelated accounts.

Thanks,
Karthi

2 Likes
6

so uncorrelated accounts do not have capability to raise request for some specific access, as it is uncorrelated does not exist in identities list hence no place to request access?

7

That is correct Shafuu

1 Like
8

An identity is created from an account from authoritative source. Hence, identity will always have an account in Auth source.

9

Thanks Rao. Sorry kindly elaborate on this please

10

A read through this document will help you understand this better