Manager Correlation Rule

Overview

This rule calculates a manager relationship between identities.

Execution

• Cloud Execution - This rule executes in the IdentityNow cloud, and it has read-only access to IdentityNow data models, but it does not have access to on-premise sources or connectors.
• Logging - Logging statements are currently only visible to SailPoint personnel.

Input

Argument	Type	Purpose
log	org.apache.log4j.Logger	Logger to log statements. Note: This executes in the cloud, and logging is currently not exposed to anyone other than SailPoint.
idn	sailpoint.server.IdnRuleUtil	Provides a read-only starting point for using the SailPoint API. From this passed reference, the rule can interrogate the IdentityNow data model including identities or account information via helper methods as described in IdnRuleUtil.
link	sailpoint.object.Link	Read-only representation of account data that has been aggregated. Use this as a basis to determine manager linkages to a specific manager identity.
managerAttributeValue	java.lang.Object	Attribute value stored in the manager attribute.

Output

Argument	Type	Purpose
returnMap	java.util.Map	Map object containing a reference to the identity attributes to identify the manager's identity. These should contain both identityAttributeName and identityAttributeValue as keys.

Template

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="Example Rule" type="ManagerCorrelation">
  <Description>Describe your rule here.</Description>
  <Source><![CDATA[

  // Add your logic here.

  ]]></Source>
</Rule>

Example - Find a manager based on the manager.email attribute

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="Manager Email Correlation" type="ManagerCorrelation">
  <Description>Finds a manager based on the manager.email attribute.</Description>
  <Source><![CDATA[

Map returnMap = new HashMap();

String managerEmail = link.getAttribute( "manager.email" );
returnMap.put( "identityAttributeName", "email");
returnMap.put( "identityAttributeValue", managerEmail );

return returnMap;

  ]]></Source>
</Rule>