Skip to main content

Manager Correlation Rule


This rule calculates a manager relationship between identities.

Use this rule to correlate an identity's manager for the following scenarios:

  • The authoritative source has multiple accounts for an identity and you must pick the manager data from the active account.
  • You need to do a lookup from an employee number to other data.
  • The identity changes types, for example, from consultant to employee with the manager coming from a different authoritative source.

The manager correlation rule runs before configured manager account correlation.


  • Cloud Execution - This rule executes in the Identity Security Cloud cloud, and it has read-only access to Identity Security Cloud data models, but it does not have access to on-premise sources or connectors.
  • Logging - Logging statements are currently only visible to SailPoint personnel.

Rule Execution


logorg.apache.log4j.LoggerLogger to log statements. Note: This executes in the cloud, and logging is currently not exposed to anyone other than SailPoint.
idnsailpoint.server.IdnRuleUtilProvides a read-only starting point for using the SailPoint API. From this passed reference, the rule can interrogate the Identity Security Cloud data model including identities or account information via helper methods as described in IdnRuleUtil.
linksailpoint.object.LinkRead-only representation of account data that has been aggregated. Use this as a basis to determine manager linkages to a specific manager identity.
managerAttributeValuejava.lang.ObjectAttribute value stored in the manager attribute.


returnMapjava.util.MapMap object containing a reference to the identity attributes to identify the manager's identity. These should contain both identityAttributeName and identityAttributeValue as keys.


<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="Example Rule" type="ManagerCorrelation">
<Description>Describe your rule here.</Description>

// Add your logic here.


Example - Find a manager based on the attribute

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="Manager Email Correlation" type="ManagerCorrelation">
<Description>Finds a manager based on the attribute.</Description>

Map returnMap = new HashMap();

String managerEmail = link.getAttribute( "" );
returnMap.put( "identityAttributeName", "email");
returnMap.put( "identityAttributeValue", managerEmail );

return returnMap;