What happens if I change the authoritative source?

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello, I am doing a survey of the impacts of having to change the authoritative source of company employees.

My question is the following: if I have to change the authoritative source, will all identities from the current source be deleted and new identities created? Will the identityId change as a result?

If the identityId changes, even if new identities with the same attributes are created, will the references to open/pending access requests and pending certification campaigns be lost?

Or would there be a way to change the authoritative source without having these impacts on the end user?

Thanks

2

You need to be more specific about what type of changes you’re making

Are you changing attributes? Are you adding some? Removing some? Do any of the attributes being changed affect the correlation rules?

Are you changing the query to bring in accounts?

ETA: I didn’t realize OP was MIGRATING to a new authoritative source as opposed to changing the existing one

3

I highly recommend you follow this guide from SailPoint:

4

The new authoritative source will come with the same attributes as the previous one. None of them will be changed. However, it will come from a completely different source.

1 Like
5

@sauvee , The most important point here would be to know if the new identities inherited the requests and actions of the old identities. This is not mentioned in this article.
Because according to the article I should create another source and another identity profile, which will duplicate all identities before deleting the old identity profile. I understand that by creating new identities I will have new identity IDs. And what about the reference of pending requests, certification campaigns, etc. that were with the old identity?

6

If you ensure that your correlation is properly setup, i.e. the accounts from the new source will correlate to the existing identities that come from the old source, this will go fine.

Then you can create a new identity profile, change identity profile priority and you’re good to go. No duplicate identities, no issues with ‘history’ or anything.

Just be sure to have that correlation properly done!

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.