AccountName/Corelation Rule for Dependent Endpoint

[soumyabrata]

Hi Team,

We have 2 Applications where App B is dependent on App A.

For App A the AccountNameRule is Systemusername will be Account Name. E.g: T123456

But for App B AccountNameRule is EmployeeID will be Account Name. E.g: 123456

For App B though it is set EmployeeID for AccountName but still it creating AccountName with Systemusername.E.g: T123456

As we passing EmployeeID in custom Jar while Account creation it creates additional entry in Accounts after Recon job. The Previous Account T123456 became Suspended and and a new entry 123456 is created with Status Active.

So is there any way to create Account for App B with EmployeeID as the Account Name?

Also I used below correlation rule for App B as in some cases employeeid can be less than 6 digit. So need to append 0's to generate systemusername.
Below correlation rule used...but the substring part not working.

(users.employeeid)=(accounts.name)#(accounts.name)=substring(users.systemusername,1,7)

So can someone please help for above issues?

Regards,

Soumya.

[NM]

Hi @soumyabrata , is endpoint B a mapped endpoint? Or a child endpoint?

Did you deploy a custom jar or using an ootb connector?

[rushikeshvartak]

• Can you share configuration how you have mapped child Endpoint ?
• Using parent endpoint under endpoint details ?
• or mapped endpoint ?

[soumyabrata]

Using Mapped Endpoint. If in App A Account not there don't allow to submit the Request for App B.

[rushikeshvartak]

Mapped endpoint follow parent endpoint account name

[soumyabrata]

Ok thanks for the update.

Can you help on the correlation rule...is there any issue with below rule?

Substring portion not working

(users.employeeid)=(accounts.name)#(accounts.name)=substring(users.systemusername,1,7)

[rushikeshvartak]

users.employeeid=accounts.name#SUBSTRING(users.systemusername,1,7)=accounts.name

Left side is always users and right side is accounts.

[NM]

Try this 

(users.employeeid)=(accounts.name)###SUBSTRING (users.systemusername,1,7)=(accounts.name)

[soumyabrata]

I think substring not working in EIC 24 versions. In 5.5 version it was working.

Tried with substring_index and it worked.

[rushikeshvartak]

both works . You can validate same in data analyzer or when you run import job towards end of job correlation works

[PremMahadikar]

Hi @soumyabrata ,

• Thats not true. Both substring and substring_index works.
• Left side is always users and right side is accounts. -> This is not true in advance config (The condition should match for correlation to work) Reference article: https://forums.saviynt.com/t5/identity-governance/how-to-truncate-email-for-account-correlation-rule...
• ### doesn't work as OR here. Only # works

For reference:

• users.username=replace(SUBSTRING_INDEX(accounts.name, '@', 1),'A','T')
• users.username=concat(substring(accounts.name,1,4),'ul')
• concat(substring(accounts.name,1,4),'ul')=users.username

If this helps your question, please consider selecting Accept As Solution and hit Kudos