cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

IdentityNow Transforms - Account Attribute

IdentityNow Transforms - Account Attribute

The transform documentation listed here is outdated and is nonger actively maintained. Please refer to https://developer.sailpoint.com/idn/docs/transforms for IdentityNow Transform documentation.

Labels (1)
Comments

Is there any reason why "startsWith" does not work on the accountPropertyFilter? (nor endsWith)

e.g. "accountPropertyFilter""(memberOf.startsWith(\"CN=abc\"))",

I'm assuming it's checking against the AD group "Value" which has the FQDN.
FYI - using contains works! - and I've tried even comparing the full value (case sensitive).
@piyush_khandelwal ?

In case of multi valued attribute, it is returning only first value. How can I get all values in case if account attribute value type is list ?

@sbhingare Using the "accountPropertyFilter", for example the "memberOf" in Active Directory source, it will check in all of the items, even it just displaying the first one it will check all of them.

Here is an example of a transform:

{
"type": "accountAttribute",
"attributes": {
"sourceName": "Active Directory",
"attributeName": "sAMAccountName",
"accountPropertyFilter": "memberOf.contains(\"<Ent1>\") || memberOf.contains(\"Ent2\")"
}
}
 
I've used it with firstValid, if the memberOf contains Ent1 or Ent2, it will display the sAMAccountName, if it not contains, it will display null, so I made firstValid to set a static value if the accountPropertyFilter pass the condition.
 
The use had 3 Entitlements when I did the test, it displays the first one but check in the other too.

Thanks @GuiNab , Actually my requirement is to assign all values in the multivalued account attribute to the identity attribute. I don't want to check if it contains certain value.

Version history
Revision #:
7 of 7
Last update:
‎May 01, 2023 09:41 PM
Updated by: