Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

AD Connector Rule Check not working

williambrant
New Contributor
New Contributor

The Saviynt rule check i have in the unique name rule is feeding back a unique SamAcocuntName.

{
"CheckForUnique": {
"Attributes": [
{
"RuleCheck": "${if(user.customproperty57=='LEGACY'){user.systemUserName}else{if (user.lastname.length()>=8){user.lastname.substring(0,8).toLowerCase()}else{user.lastname.toLowerCase()+user.preferedFirstName.substring(0,1).toLowerCase()}}}###${if(user.customproperty57=='LEGACY'){user.systemUserName}else{if (user.lastname.length()>=8){user.lastname.substring(0,8).toLowerCase()}else{user.lastname.toLowerCase()+user.preferedFirstName.substring(0,1).toLowerCase()+'1'}}}1",
"samaccountname": "customproperty23"
}
]
}
}

 

This seems to be  valid for the first response but it does not bring a  back a unique value.  I see the rule being executed in the log

checkForUnique:{"Attributes":[{"RuleCheck":"xxxxxxxx, requestAccessAttributes:[:],

 

1 REPLY 1

stalluri
Valued Contributor
Valued Contributor

@williambrant 

 

${if(user.customproperty57.equals('LEGACY')){user.systemUserName}else{if(user.lastname.length()>=8){user.lastname.substring(0,8).toLowerCase()}else{user.lastname.toLowerCase()+user.preferedFirstName.substring(0,1).toLowerCase()}}}###${if(user.customproperty57.equals('LEGACY')){user.systemUserName}else{if(user.lastname.length()>=8){user.lastname.substring(0,8).toLowerCase()}else{user.lastname.toLowerCase()+user.preferedFirstName.substring(0,1).toLowerCase()+'1'}}}

 

Spoiler
Rule:

Example1:
${if (ServiceAccountOwnerMap.ServiceAccountType.equals('Service')) {
'CN='+task.accountName+',OU=Users,DC=dev,DC=abccompany,DC=com' } else
if(ServiceAccountOwnerMap.ServiceAccountType.equals('Test')) {
'CN='+task.accountName+',OU=Users,DC=dev,DC=abccompany,DC=com' } else
if(ServiceAccountOwnerMap.ServiceAccountType.equals('Support')) {
'CN='+task.accountName+',OU=Users,DC=dev,DC=abccompany,DC=com' } else if
(user.middlename != null && user.middlename != '') { 'CN='+user.lastname+'\\,
'+user.preferedFirstName+'\\
'+user.middlename+',OU=Accounts,DC=dev,DC=abccompany,DC=com'+'###'+'CN='+user.lastname+
'\\, '+user.preferedFirstName+'1\\ '+user.middlename+',
OU=Accounts,DC=dev,DC=abccompany,DC=com'+'###'+'CN='+user.lastname+'\\,
'+user.preferedFirstName+'2\\
'+user.middlename+',OU=Accounts,DC=dev,DC=abccompany,DC=com' }
else { 'CN='+user.lastname+'\\,
'+user.preferedFirstName+',OU=Accounts,DC=dev,DC=abccompany,
DC=com'+'###'+'CN='+user.lastname+'\\,
'+user.preferedFirstName+'1,OU=Accounts,DC=dev,DC=abccompany,
DC=com'+'###'+'CN='+user.lastname+'\\,
'+user.preferedFirstName+'2,OU=Accounts,DC=dev,DC=abccompany,DC=com'
}
}

Example2:
CN=${user.firstname} ${user.lastname},${ if(user.employeeType.equals('Full Time'))
{'OU=Access Management,OU=Testing,OU=sales,DC=abccompany,DC=com'}
else {if (user.customer.id==1)
{'OU=Test1,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else {if (user.customer.id==2)
{'OU=Test2,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else {if (user.customer.id==3)
{'OU=Test3,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else {if (user.customer.id==4)
{'OU=Test4,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else {if (user.customer.id==5)
{'OU=Test5,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else {if (user.customer.id==6)
{'OU=Test5,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}
else
{'OU=OtherVendors,OU=OutsideVendor,OU=Users,OU=sales,DC=sav,DC=com'}}}}}}}
}




Best Regards,
Sam Talluri
If you find this a helpful response, kindly consider selecting Accept As Solution and clicking on the kudos button.