Blog

New Capability - New Identity Attributes, Default Identity Profile Mapping and Transforms

Author

  • dinesh_mishra

    SailPoint

We are excited to share that the new Identity attributes, default Identity profile mapping and two new transforms are now available in the Identity Security Cloud tenants onboarded after 2024-02-07 (i.e. 7th of February’24) which will save a significant amount of time for configuring Identity Profile and utilizing the new attributes across the Identity Security Cloud.

The following new capabilities are available in the Identity Security Cloud.

  1. New Identity Attributes
  2. Default Identity Profile Mapping
  3. New Transforms

New Identity Attributes

The subsequent number of default Identity attributes will save the time for utilizing them through out the Identity Security Cloud. We introduced 16 new set of default identity attributes as follows -

  • displayName: Middle Name, name: middleName, type: string
  • displayName: Preferred Name, name: preferredName, type: string
  • displayName: Initials, name: initials, type: string
  • displayName: Title, name: title, type: string
  • displayName: Organization, name: organization, type: string
  • displayName: Department, name: department, type: string
  • displayName: Cost Center, name: costCenter, type: string
  • displayName: Location, name: location, type: string
  • displayName: Location Code, name: locationCode, type: string
  • displayName: Street Address, name: streetAddress, type: string
  • displayName: City, name: city, type: string
  • displayName: State, name: state, type: string
  • displayName: Postal Code, name: postalCode, type: string
  • displayName: Preferred Language, name: preferredLanguage, type: string
  • displayName: Timezone, name: timezone, type: string
  • displayName: Identity State, name: identityState, type: string

Default Identity Profile Mapping

The default Identity profile mapping capability will optimize and streamline the identity profile mapping configuration process, offering a more efficient approach.

It enables the seamless creation of an Identity Profile by automatically establishing mappings between source attributes and default identity attributes, complete with the appropriate transformations. Consequently, when selecting a source and creating an identity profile, the predefined mappings are readily available on the mappings page. This not only saves time but also ensures a more comprehensive and user-friendly experience during the configuration of Identity Profiles.

As of now, the Workday connector has the default identity profile mapping mapped in the connector and it will be available in the other authoritative sources soon, including authoritative SaaS Connectors.

The Workday connector has following new account attributes which are also used in the default identity profile mapping -

  • PREFIX
  • SUFFIX
  • PREFERRED_FIRST_NAME
  • LOCALE_ID
  • Time_Profile_ID

The default identity profile mapping for Workday connector consists of following mapping and transforms,

Identity Attribute

Account Attribute

Default Transform

displayName

WORKER_NAME

Use Preferred Name

email

EMAIL_ADDRESS_WORK

-

personalEmail

EMAIL_ADDRESS_HOME

-

workPhone

WORK_TELEPHONE

-

phone

WORK_MOBILE

-

title

JOBTITLE

-

costCenter

COST_CENTER

-

department

DEPARTMENT

-

organization

ORGANIZATION_NAME

-

firstname

FIRST_NAME

-

middleName

MIDDLE_NAME

-

lastname

LAST_NAME

-

identificationNumber

FILENUMBER

-

manager

MANAGER_ID

-

uid

FILENUMBER

-

preferredName

PREFERRED_FIRST_NAME

-

startDate

HIREDATE

-

endDate

TERMINATION_DATE

-

faxPhone

WORK_FAX

-

streetAddress

ADDRESS_WORK

-

city

CITY

-

state

STATE

-

postalCode

POSTAL_CODE

-

country

COUNTRY

ISO3166 Country Format

timezone

Time_Profile_ID

-

NOTE -

  • This default mapping is applicable for new source and new Identity profile for the tenants onboarded after 2024-02-07 and it can be changed as per your requirement.

New Transforms

The new RFC5646 transform can be used to convert an incoming string into an RFC 5646 language tag value and new Use Preferred Name in Display Name transform can be used to form an identity’s Display Name value using the Preferred Name value when it exists over the Given Name value. The Family Name value is then appended to form the complete Display Name, e.g., ("Preferred Name" or "Given Name") + "Family Name".

NOTE -

For the tenants onboarded before 2024-02-07, the Identity Profile mapping configuration page excludes mappings and transforms for unavailable identity attributes and transforms. You can still add any of the newly created identity attributes or transforms manually as per your requirement.

We have provided the new set of identity attributes along with predefined profile mapping and out of the box transforms that will provide quicker configuration and save a lot of time on the implementation.

If you have any questions, please reach out to us, and we would be more than happy to help you in all possible ways.

Thanks!