About Transforms, Rules, and Generators

About Transforms, Rules, and Generators

 

Transforms

transform is a "no-code" configuration that can be edited using an API. Transforms change or transform data from one form into another. In SailPoint's cloud services, transforms allow you to manipulate attribute values while aggregating from or provisioning to a source. For example, you can use a transform to change data from one format to another before you map it to an attribute in an identity profile.

Simple transforms are used to make a single change to a single piece of data related to a single source. IdentityNow provides several default transforms you can use for simple data format changes to use when mapping attributes in identity profiles. For more information, see the section below on Using Simple Transforms.

Alternatively, you can combine simple transforms to perform multiple operations on a single attribute. These types of transforms are considered complex transforms. For example, you can use a complex transform to automatically calculate an identity's lifecycle state based other attributes, such as start date.

You can also create and upload additional transforms using the appropriate transform REST APIs. Note, that if you contact SailPoint Services to help with this effort, it will be considered a billable service.

For more information, see the following Wiki articles:

Rules

 A rule is a code-based configuration that provides additional flexibility where needed. For example, rules can be used to calculate complex identity attributes, modify provisioning instructions, or interact with a connector.

Unlike transforms, rules require a review by SailPoint Services before they can be implemented for your org. For more information on the review process and guidelines, see the IdentityNow Rule Guide.

Generators

generator is a type of rule used specifically to generate the value for an identity attribute. These values are then used to create an account on a source. You can use generators on the Create Profile page for any sources that support provisioning.

Some generators include a Pattern Used field you can use to define the text and identity attributes that IdentityNow will use to compile the required value, based on the requirements for your org. You can also specify the order that IdentityNow generates attributes so that you can reference the value of one generated attribute in a subsequent attribute.

While you can select new attributes for any of these fields, SailPoint recommends using the default values in the Generator fields for the generated attributes. If you need to use custom generators, please contact SailPoint Services for assistance.

Using Simple Transforms

IdentityNow provides several default transforms that you can use to make simple changes to a single piece of data coming from a single source for the sake of consistency, accuracy, or preventing duplicates. For example, you might need to convert a database value from uppercase to lowercase.

Complete the following steps:

  1. Start the process of creating an identity profile.
  2. Click the Mappings tab.
  3. In the Source drop-down list of the attribute you want to transform, select the source you want to get the value from.
  4. In the Attribute drop-down list, select the source attribute you want to map to.

    kelly_wells_0-1606762084677.png

  5. In the Transform drop-down, select the transform you want to use.

    kelly_wells_1-1606762084679.png

  6. Make selections for all the required attribute mappings. For more information, see Mapping Identity Profiles.

    The following simple transforms are available by default:

    • E.164 Phone Format - Converts a phone number into the E.164 standard for phone numbers.
    • ISO3166 Country Format - Converts the name of a country into the two-character ISO 3166 format for countries.
    • Remove Diacritical Marks - Converts diacritical marks to their base characters.
    • ToLower - Converts the value in the selected attribute to lowercase letters.
    • ToUpper - Converts the value in the selected attribute to uppercase letters.

  7. Click Save.

Using Complex Transforms

If your organization has configured custom transforms, also referred to as complex transforms, and uploaded them to your org, those transforms will be available for you to select when mapping attributes for an identity profile on a Complex Data Source.

Complete the following steps:

  1. Start the process of creating an identity profile.
  2. Click the Mappings tab.
  3. In the Source drop-down list of the attribute you want to transform, select Complex Data Source.

    kelly_wells_2-1606762084681.png

    The following rules become available in the Transforms drop-down whenever Complex Data Source is selected: 

    • Cloud Calculate Identity Status - This rule calculates the identity cloudStatus attribute for the identity.

    • Cloud Calculate Internal Identity Status Rule - This rule also calculates the identity cloudStatus attribute for the identity.

    • Cloud Calculate Authentication Alias - This rule calculates any authentication aliases for the identity.

  4. In the Transform drop-down list, select the source transform you want to use and click Save.



 

Version history
Revision #:
12 of 12
Last update:
‎Dec 08, 2020 12:46 PM
Updated by:
 
Contributors