# \#transforms

**URL:** https://developer.sailpoint.com/discuss/tag/transforms/277.md

[Latest](https://developer.sailpoint.com/discuss/latest.md) · [Categories](https://developer.sailpoint.com/discuss/categories.md) · [Tags](https://developer.sailpoint.com/discuss/tags.md)

---

## [How to display a multi-valued account attribute in an identity attribute](https://developer.sailpoint.com/discuss/t/how-to-display-a-multi-valued-account-attribute-in-an-identity-attribute/225669)

<div class="topic-metadata">

**Author:** [@lanphuongmai](https://developer.sailpoint.com/discuss/u/lanphuongmai)\
**Replies:** 5\
**Last updated:** [October 16, 2026, 3:17am UTC](https://developer.sailpoint.com/discuss/t/how-to-display-a-multi-valued-account-attribute-in-an-identity-attribute/225669 "2026-10-16T03:17:13Z")

</div>

Is there a transform possible to display all values of a multi-valued account attribute? For example I want to make an identity attribute for the Office 365 (entra ID source) "assignedLicenses" - which is multi-valued. I…

---

## [Jumpstart your IAM skills with transforms](https://developer.sailpoint.com/discuss/t/jumpstart-your-iam-skills-with-transforms/225690)

<div class="topic-metadata">

**Author:** [@darylclaude\_medina](https://developer.sailpoint.com/discuss/u/darylclaude_medina)\
**Replies:** 0\
**Last updated:** [October 15, 2026, 10:44pm UTC](https://developer.sailpoint.com/discuss/t/jumpstart-your-iam-skills-with-transforms/225690 "2026-10-15T22:44:39Z")

</div>

Many organizations lack the skillset on their IAM teams to have their own Identity Security Engineers, meaning that they need to rely on partners or professional services to do more complex tasks besides just working in …

---

## [sAMAccountName is not provided. samAccountName will be generated randomly by Active Directory](https://developer.sailpoint.com/discuss/t/samaccountname-is-not-provided-samaccountname-will-be-generated-randomly-by-active-directory/224580)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 3\
**Last updated:** [October 5, 2026, 3:19pm UTC](https://developer.sailpoint.com/discuss/t/samaccountname-is-not-provided-samaccountname-will-be-generated-randomly-by-active-directory/224580 "2026-10-05T15:19:09Z")

</div>

I created a rule designed to take an account from a source and retrieve the \`employeeID\` attribute; if the identity attribute (of the “user” type) is set to “TERCEIRO” (Third-Party), the rule should generate a sequential…

---

## [Preserve AD Description Non-Employees](https://developer.sailpoint.com/discuss/t/preserve-ad-description-non-employees/223818)

<div class="topic-metadata">

**Author:** [@dpowers1](https://developer.sailpoint.com/discuss/u/dpowers1)\
**Replies:** 9\
**Last updated:** [September 25, 2026, 7:42pm UTC](https://developer.sailpoint.com/discuss/t/preserve-ad-description-non-employees/223818 "2026-09-25T19:42:03Z")

</div>

I am working on transform that will preserve the current AD Description in Active Directory if the user is in a Lifecycle state of hrHold, securityHold or litigationHold. Below is my transform that I use to set the AD De…

---

## [ISO8601 Date Format and Timezone Handling in Lifecycle State Transforms](https://developer.sailpoint.com/discuss/t/iso8601-date-format-and-timezone-handling-in-lifecycle-state-transforms/223532)

<div class="topic-metadata">

**Author:** [@VittoriaVizzari](https://developer.sailpoint.com/discuss/u/VittoriaVizzari)\
**Replies:** 3\
**Last updated:** [September 23, 2026, 12:54pm UTC](https://developer.sailpoint.com/discuss/t/iso8601-date-format-and-timezone-handling-in-lifecycle-state-transforms/223532 "2026-09-23T12:54:49Z")

</div>

Hi all, I am trying to understand how ISC handles timezones when evaluating dates in Lifecycle State transforms. In some cases, I had to add an extra day to the comparison (for example, using endDate + 3d instead of en…

---

## [ISC Transform for Machine Account to get multi-valued account attribute](https://developer.sailpoint.com/discuss/t/isc-transform-for-machine-account-to-get-multi-valued-account-attribute/221238)

<div class="topic-metadata">

**Author:** [@ronaldchuiASB](https://developer.sailpoint.com/discuss/u/ronaldchuiASB)\
**Replies:** 9\
**Last updated:** [September 21, 2026, 1:41am UTC](https://developer.sailpoint.com/discuss/t/isc-transform-for-machine-account-to-get-multi-valued-account-attribute/221238 "2026-09-21T01:41:18Z")

</div>

Hi ISC Experts, We hit a problem when trying to get the values from a multi-valued account attribute for a Machine Account. The requirement is to extract a value from a multi-valued account attribute (in our case, Tags…

---

## [Preserve Existing AD Description](https://developer.sailpoint.com/discuss/t/preserve-existing-ad-description/222876)

<div class="topic-metadata">

**Author:** [@dpowers1](https://developer.sailpoint.com/discuss/u/dpowers1)\
**Replies:** 4\
**Last updated:** [September 17, 2026, 9:14pm UTC](https://developer.sailpoint.com/discuss/t/preserve-existing-ad-description/222876 "2026-09-17T21:14:44Z")

</div>

I am working on a transform to set the AD Description but our CISO does not want the AD Description to change for users in a specific OU because they have put in there things like do not re-enable unless talking to CISO.…

---

## [Mastering Timezone & Daylight Savings Management in ISC Transforms](https://developer.sailpoint.com/discuss/t/mastering-timezone-daylight-savings-management-in-isc-transforms/222118)

<div class="topic-metadata">

**Author:** [@trettkowski](https://developer.sailpoint.com/discuss/u/trettkowski)\
**Replies:** 2\
**Last updated:** [September 10, 2026, 2:42am UTC](https://developer.sailpoint.com/discuss/t/mastering-timezone-daylight-savings-management-in-isc-transforms/222118 "2026-09-10T02:42:44Z")

</div>

Introduction Why: If you manage time-dependent logic in SailPoint Identity Security Cloud (ISC), you likely know the pain of Daylight Saving Time. When you use a transform that calculates an offset based on hours, th…

---

## [Handling Null Values for Pronouns in target source HTTP UPDATE Operation](https://developer.sailpoint.com/discuss/t/handling-null-values-for-pronouns-in-target-source-http-update-operation/220241)

<div class="topic-metadata">

**Author:** [@lalithajay](https://developer.sailpoint.com/discuss/u/lalithajay)\
**Replies:** 18\
**Last updated:** [August 30, 2026, 2:56pm UTC](https://developer.sailpoint.com/discuss/t/handling-null-values-for-pronouns-in-target-source-http-update-operation/220241 "2026-08-30T14:56:31Z")

</div>

Hi , The Pronouns attribute is currently mapped 1:1 in the Identity Profile, with no transformation applied, directly from the source attribute. The Pronounce attribute is also defined in the target source’s UPDATE HT…

---

## [Transform to dynamically assign Manager based on source and account status](https://developer.sailpoint.com/discuss/t/transform-to-dynamically-assign-manager-based-on-source-and-account-status/220807)

<div class="topic-metadata">

**Author:** [@MichaelCastillo7](https://developer.sailpoint.com/discuss/u/MichaelCastillo7)\
**Replies:** 1\
**Last updated:** [August 27, 2026, 6:46pm UTC](https://developer.sailpoint.com/discuss/t/transform-to-dynamically-assign-manager-based-on-source-and-account-status/220807 "2026-08-27T18:46:58Z")

</div>

Hello, I would like to ask if anyone knows the best way to implement a transform so that an identity’s Manager value changes depending on the source and the account status. I currently use a firstValid approach for oth…

---

## [Create Provisioning Policy transform](https://developer.sailpoint.com/discuss/t/create-provisioning-policy-transform/220606)

<div class="topic-metadata">

**Author:** [@jmmb](https://developer.sailpoint.com/discuss/u/jmmb)\
**Replies:** 6\
**Last updated:** [August 25, 2026, 9:39am UTC](https://developer.sailpoint.com/discuss/t/create-provisioning-policy-transform/220606 "2026-08-25T09:39:59Z")

</div>

Hi All, We have create a create account provisioning policy in which it will concatenate the firstname and lastname of the user is the characters are less than 30, else, it will output up to the 30th character of the fi…

---

## [Problem creating an Azure DevOps account](https://developer.sailpoint.com/discuss/t/problem-creating-an-azure-devops-account/219937)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 3\
**Last updated:** [August 20, 2026, 4:20pm UTC](https://developer.sailpoint.com/discuss/t/problem-creating-an-azure-devops-account/219937 "2026-08-20T16:20:34Z")

</div>

Hello everyone, I am getting the error shown in the screenshot from the native Azure DevOps connector. I’d like to know if anyone else has encountered this error and how they resolved it

---

## [Identity Search Range Queries Not Working on Custom Date Identity Attribute (lastLoginValue) Although ISO8601 Format Is Populated](https://developer.sailpoint.com/discuss/t/identity-search-range-queries-not-working-on-custom-date-identity-attribute-lastloginvalue-although-iso8601-format-is-populated/218966)

<div class="topic-metadata">

**Author:** [@VasanthRam](https://developer.sailpoint.com/discuss/u/VasanthRam)\
**Replies:** 10\
**Last updated:** [August 17, 2026, 7:44pm UTC](https://developer.sailpoint.com/discuss/t/identity-search-range-queries-not-working-on-custom-date-identity-attribute-lastloginvalue-although-iso8601-format-is-populated/218966 "2026-08-17T19:44:28Z")

</div>

Hi SailPoint Community, I am facing an issue with Identity Search range queries on a custom identity attribute called lastLoginValue. Background I have created an identity attribute named lastLoginValue using a transfo…

---

## [Converting Identity Lifecycle State to Uppercase for AD Provisioning](https://developer.sailpoint.com/discuss/t/converting-identity-lifecycle-state-to-uppercase-for-ad-provisioning/217777)

<div class="topic-metadata">

**Author:** [@lalithajay](https://developer.sailpoint.com/discuss/u/lalithajay)\
**Replies:** 12\
**Last updated:** [August 5, 2026, 2:47am UTC](https://developer.sailpoint.com/discuss/t/converting-identity-lifecycle-state-to-uppercase-for-ad-provisioning/217777 "2026-08-05T02:47:14Z")

</div>

Hi All, We have a requirement to push the Identity Lifecycle State (LCS) to an Active Directory attribute in uppercase. As you know, when the LCS is created in the Identity Profile, it is automatically converted to lo…

---

## [Jumpstart your IAM skills with transforms](https://developer.sailpoint.com/discuss/t/jumpstart-your-iam-skills-with-transforms/218154)

<div class="topic-metadata">

**Author:** [@darylclaude\_medina](https://developer.sailpoint.com/discuss/u/darylclaude_medina)\
**Replies:** 0\
**Last updated:** [August 4, 2026, 10:59pm UTC](https://developer.sailpoint.com/discuss/t/jumpstart-your-iam-skills-with-transforms/218154 "2026-08-04T22:59:00Z")

</div>

Many organizations lack the skillset on their IAM teams to have their own Identity Security Engineers, meaning that they need to rely on partners or professional services to do more complex tasks besides just working in …

---

## [Validate entitlement](https://developer.sailpoint.com/discuss/t/validate-entitlement/217990)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 10\
**Last updated:** [August 4, 2026, 5:05pm UTC](https://developer.sailpoint.com/discuss/t/validate-entitlement/217990 "2026-08-04T17:05:07Z")

</div>

Hello everyone, has anyone developed a transform that validates whether an identity has an entitlement from a specific source?

---

## [requiresPeriodicRefresh - A New Discovery](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-a-new-discovery/212215)

<div class="topic-metadata">

**Author:** [@j\_place](https://developer.sailpoint.com/discuss/u/j_place)\
**Replies:** 9\
**Last updated:** [July 30, 2026, 11:47am UTC](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-a-new-discovery/212215 "2026-07-30T11:47:07Z")

</div>

Ok, I’m not sure whether this is a new discovery, but it is to me. You know how we’re all a bit puzzled about the requiresPeriodicRefresh Transform attribute? No, I’m not talking about where to put it; we should all kn…

---

## [Disable account via transformation](https://developer.sailpoint.com/discuss/t/disable-account-via-transformation/217457)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 2\
**Last updated:** [July 28, 2026, 2:13am UTC](https://developer.sailpoint.com/discuss/t/disable-account-via-transformation/217457 "2026-07-28T02:13:25Z")

</div>

Hi everyone, I created a transform that checks if an identity has entitlements from a specific source (using the source ID). The idea is that if the transform returns false, the account gets disabled via the account dea…

---

## [Optimizing Lifecycle State Transitions: Resolving Offboarding Delays using nextProcessingDate identity attribute](https://developer.sailpoint.com/discuss/t/optimizing-lifecycle-state-transitions-resolving-offboarding-delays-using-nextprocessingdate-identity-attribute/217266)

<div class="topic-metadata">

**Author:** [@rohit\_wekhande](https://developer.sailpoint.com/discuss/u/rohit_wekhande)\
**Replies:** 0\
**Last updated:** [July 24, 2026, 7:59pm UTC](https://developer.sailpoint.com/discuss/t/optimizing-lifecycle-state-transitions-resolving-offboarding-delays-using-nextprocessingdate-identity-attribute/217266 "2026-07-24T19:59:10Z")

</div>

Problem In a Healthcare client implementation utilizing SailPoint Identity Security Cloud (ISC), we configured Active and Inactive Lifecycle States (LCS). The business requirement specified that employee offboarding (Act…

---

## [SailPoint CLI \`transform preview\` returns 400.1 Bad request content in Sandbox only](https://developer.sailpoint.com/discuss/t/sailpoint-cli-transform-preview-returns-400-1-bad-request-content-in-sandbox-only/216906)

<div class="topic-metadata">

**Author:** [@hanaie](https://developer.sailpoint.com/discuss/u/hanaie)\
**Replies:** 4\
**Last updated:** [July 22, 2026, 12:02am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-cli-transform-preview-returns-400-1-bad-request-content-in-sandbox-only/216906 "2026-07-22T00:02:33Z")

</div>

Hello, The SailPoint CLI transform preview command returns a 400.1 Bad request content error when it is executed against our Identity Security Cloud Sandbox tenant. The preview previously worked in the Sandbox tenant. …

---

## [Fetch end date of the users terminated manually as emergency termination](https://developer.sailpoint.com/discuss/t/fetch-end-date-of-the-users-terminated-manually-as-emergency-termination/215801)

<div class="topic-metadata">

**Author:** [@Deepak\_Chaudhary](https://developer.sailpoint.com/discuss/u/Deepak_Chaudhary)\
**Replies:** 22\
**Last updated:** [July 18, 2026, 2:09am UTC](https://developer.sailpoint.com/discuss/t/fetch-end-date-of-the-users-terminated-manually-as-emergency-termination/215801 "2026-07-18T02:09:22Z")

</div>

Hi Everyone, When the user gets terminated manually then we need the same date to be fetched in any attribute, when the account was moved to terminated state and this date needs to be selectable via SailPoint. The forma…

---

## [Disable session Entra ID](https://developer.sailpoint.com/discuss/t/disable-session-entra-id/215790)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 4\
**Last updated:** [July 6, 2026, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/disable-session-entra-id/215790 "2026-07-06T14:22:57Z")

</div>

Hello everyone, I am setting up a workflow to disable an Entra ID session, and I have a question regarding the request step. First, I need to make the following request to generate the token: https://login.microsoftonl…

---

## [Error calculating attribute during synchronization](https://developer.sailpoint.com/discuss/t/error-calculating-attribute-during-synchronization/215350)

<div class="topic-metadata">

**Author:** [@guilherme\_sec](https://developer.sailpoint.com/discuss/u/guilherme_sec)\
**Replies:** 9\
**Last updated:** [July 2, 2026, 8:39am UTC](https://developer.sailpoint.com/discuss/t/error-calculating-attribute-during-synchronization/215350 "2026-07-02T08:39:32Z")

</div>

Hi everyone, I need to enable an AD synchronization attribute—specifically, the “Work Email” attribute—but I get an error when the calculation runs.

---

## [ISC Transform Exception for Unmapped Identity Attributes](https://developer.sailpoint.com/discuss/t/isc-transform-exception-for-unmapped-identity-attributes/214461)

<div class="topic-metadata">

**Author:** [@baoussounda](https://developer.sailpoint.com/discuss/u/baoussounda)\
**Replies:** 7\
**Last updated:** [June 24, 2026, 8:56am UTC](https://developer.sailpoint.com/discuss/t/isc-transform-exception-for-unmapped-identity-attributes/214461 "2026-06-24T08:56:44Z")

</div>

Hi, For example, with the following transform in an Account Provisioning Policy: { "name": "contractType", "transform": { "type": "static", "attributes": { "empType": { …

---

## [Identity Selector Rule Alternative in ISC](https://developer.sailpoint.com/discuss/t/identity-selector-rule-alternative-in-isc/214387)

<div class="topic-metadata">

**Author:** [@chrisk](https://developer.sailpoint.com/discuss/u/chrisk)\
**Replies:** 6\
**Last updated:** [June 22, 2026, 8:00pm UTC](https://developer.sailpoint.com/discuss/t/identity-selector-rule-alternative-in-isc/214387 "2026-06-22T20:00:21Z")

</div>

Before moving to ISC from IIQ, we had a Role that used an Identity Selector Rule to populate the Role. Criteria is - Identity does not live in Canada, but is manager of a Canadian Identity Would this now fall into need…

---

## [Email generator cloud rule within a transform](https://developer.sailpoint.com/discuss/t/email-generator-cloud-rule-within-a-transform/211986)

<div class="topic-metadata">

**Author:** [@ArielM](https://developer.sailpoint.com/discuss/u/ArielM)\
**Replies:** 6\
**Last updated:** [June 10, 2026, 4:49pm UTC](https://developer.sailpoint.com/discuss/t/email-generator-cloud-rule-within-a-transform/211986 "2026-06-10T16:49:08Z")

</div>

Hi team. I am developing two cloud rules: one to generate user emails and another for the SAMAccountName. For our client, internal user emails use the same logic as the SAMAccountName plus the domain. For external use…

---

## [requiresPeriodicRefresh not triggering after daily ISC Identity Refresh](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-not-triggering-after-daily-isc-identity-refresh/211938)

<div class="topic-metadata">

**Author:** [@leolopes\_verisure](https://developer.sailpoint.com/discuss/u/leolopes_verisure)\
**Replies:** 23\
**Last updated:** [June 8, 2026, 3:50pm UTC](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-not-triggering-after-daily-isc-identity-refresh/211938 "2026-06-08T15:50:11Z")

</div>

Hi All, Following previous discussions (just for context): https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-changes-and-wrong-documentation/211788?u=leolopes\_verisure I got the point where requiresP…

---

## [requiresPeriodicRefresh - changes and wrong documentation](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-changes-and-wrong-documentation/211788)

<div class="topic-metadata">

**Author:** [@leolopes\_verisure](https://developer.sailpoint.com/discuss/u/leolopes_verisure)\
**Replies:** 3\
**Last updated:** [June 8, 2026, 2:21pm UTC](https://developer.sailpoint.com/discuss/t/requiresperiodicrefresh-changes-and-wrong-documentation/211788 "2026-06-08T14:21:55Z")

</div>

Hello all, While digging about requiresPeriodicRefresh I have found useful information in this forum, but not in official documentation unfortunatelly. Continuing this post: requiresPeriodicRefresh - strangely undocume…

---

## [ISC account retention for only specific accounts](https://developer.sailpoint.com/discuss/t/isc-account-retention-for-only-specific-accounts/207128)

<div class="topic-metadata">

**Author:** [@KristinaWawrzyn](https://developer.sailpoint.com/discuss/u/KristinaWawrzyn)\
**Replies:** 8\
**Last updated:** [May 28, 2026, 11:43am UTC](https://developer.sailpoint.com/discuss/t/isc-account-retention-for-only-specific-accounts/207128 "2026-05-28T11:43:25Z")

</div>

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic. Hello everyone, I’m faced with a chal…

---

## [Unique Sequential ID Creation in Create Account Policy](https://developer.sailpoint.com/discuss/t/unique-sequential-id-creation-in-create-account-policy/207199)

<div class="topic-metadata">

**Author:** [@shyam\_sreevalsan](https://developer.sailpoint.com/discuss/u/shyam_sreevalsan)\
**Replies:** 30\
**Last updated:** [May 27, 2026, 4:06pm UTC](https://developer.sailpoint.com/discuss/t/unique-sequential-id-creation-in-create-account-policy/207199 "2026-05-27T16:06:32Z")

</div>

Hello Experts, We have a requirement where we need to generate a unique sequential uidnumber during account creation. This is an IBM Tivoli DS connector which follows LDAP. We thought of implementing this using the Cre…

[Next page](https://developer.sailpoint.com/discuss/tag/transforms/277.md?match_all_tags=true&page=1&tags%5B%5D=transforms)
