Attribute Sync for Boolean account attribute (SalesForce IsActive)

Hi, I’m attempting to Attribute Sync an identity attribute to the SalesForce SaaS connector account attribute “IsActive”. The account attribute comes OOB as “BOOLEAN”.

Identity attribute config (I was able to make a PUT request to change the type of this attribute to “boolean”, based on the docs I am unsure if this is valid, but it did not change the error I received):

<span class="">{
        <span class="">"sources"<span class="">: <span class="">[
            <span class="">{
                <span class="">"type"<span class="">: <span class="">"rule"<span class="">,
                <span class="">"properties"<span class="">: <span class="">{
                    <span class="">"ruleType"<span class="">: <span class="">"IdentityAttribute"<span class="">,
                    <span class="">"ruleName"<span class="">: <span class="">"Cloud Promote Identity Attribute"
                <span class="">}
            <span class="">}
        <span class="">]<span class="">,
        <span class="">"name"<span class="">: <span class="">"salesforceIsActive"<span class="">,
        <span class="">"displayName"<span class="">: <span class="">"SalesForce Is Active"<span class="">,
        <span class="">"standard"<span class="">: <span class=""><span class="">false<span class="">,
        <span class="">"type"<span class="">: <span class="">"boolean"<span class="">,
        <span class="">"multi"<span class="">: <span class=""><span class="">false<span class="">,
        <span class="">"searchable"<span class="">: <span class=""><span class="">false<span class="">,
        <span class="">"system"<span class="">: <span class=""><span class="">false
    <span class="">}</span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span>

Before changing the identity attribute to a “boolean”, I additionally tried changing the casing to be either “true” or “True”, but nothing I have tried yet has gotten me around this error message from the connector on the provisioning attempt (see attached image)

I see some somewhat related but very stale discussions about this issue – here in particular Boolean attribute sync, but no clear resolution, at least one that applies to me here. I’ve also opened a support ticket in the meantime, but throwing this out there in case anyone has any idea or has gone down this path before. I am aware that “Disable Account” for this source would also result in IsActive=False, however, we were hoping for the flexibility in disabling accounts that an attribute sync linked to a more dynamic identity attribute would provide.

It also seems worth noting that the “Account Creation” policy successfully allowed a boolean attribute to be written down to SalesForce, which implies to me that Attribute Sync would ideally be flexible in this regard too.

UPDATE:

I’ve also now attempted adding an “UPDATE” account provisioning policy to the source in question. I get a different failure now, in that it says “PASSED” rather than “FAILED” but still gives back the same error. Below is the json I currently have for the provisioning policy:

{“name”: “Update Account”,“description”: null,“usageType”: “UPDATE”,“fields”: [{“name”: “IsActive”,“transform”: {“type”: “identityAttribute”,“attributes”: {“name”: “salesforceIsActive”}},“attributes”: {},“isRequired”: false,“type”: “boolean”,“isMultiValued”: false}]}


imckenzie_0-1753995090725.png

Identity attribute is always passed as string, options:

1. Use before provisioning rule to change from string to boolean: Before Provisioning Rule | SailPoint Developer Community

2. Why is this sync required? If the intent is to disable / activate account based on lifecycle state, then can’t it be achieved from identity profile → provisioning tab?

Hi, thank you for the response. We can get most of what we want from lifecycle state management enabling/disabling an account, however there are cases where we’d want to “re-enable” or “disable a still active identity’s SalesForce account” still that don’t map as cleanly to the natural lifecycle states we have configured. It seemed as if attribute sync presented the easiest way to flexibly manage this attribute.

It seems to me as if perhaps the connector docs could call this out as a limitation of managing “IsActive” for future users, if the intent of the connector team was to NOT allow provisioning support of IsActive this way.