Dynamic attribute for enterprise role

[prachi]

Hi,

We have a requirement where we want to use dynamic attributes (say Brand Name) with brand values as value for the dynamamic attribute for enterprise roles.

On enterprise role request the user should be asked to first select a Brand value displayed in the dynamic attribute.

After users selects the Brand value, all enterprise role which belongs to that brand should be displayed and available for request.

Any inputs on how can we acheive this would be helpful.

[naveenss]

Hi @prachi  are you requesting the enterprise roles from the "Request Enterprise Role" tile?

[prachi]

Hi @naveenss ,

We are on 23.8v, so there we are requesting enterprise role from "Request access for others" tile.

[naveenss]

Thanks for the confirmation, @prachi 

Populate the brand value in the enterprise role customproperty (customproperty1 for example), and use the below role type query to filter the enterprise roles based on the dynamic attribute selection.

Role Type Requested query: r.customproperty1='${brandName}'

Btw, are you using the classic UI for the application request?

[prachi]

Hi @naveenss ,

Can you help with where can we configure the dynamic attribute ${brandName} ? 

I have configured the dynamic attribute in global configuration but that attribute is not showing up during the request.

[naveenss]

Hi @prachi ,

The dynamic attributes are configured at the endpoint level. Navigate to Admin > Identity Repository > Security Systems > Endpoints > Search for the endpoint and select > Go to "Dynamic Attribute" > Action > Add Attribute.

Refer to the below documentation:

Viewing or Updating Endpoints (saviyntcloud.com)

[prachi]

Thanks @naveenss for the response.

I tried creating a dynamic attribute and adding the query under Role Type Requested query and this is working fine.

But using this, user first needs to select the application and then the the dynamic attribute will be available for the user? 

Is there any way in which we can show the dynamic attribute when requesting the role from enterprise request(Adding ss below)?

[naveenss]

Hi @prachi 

I don't think that's possible.