Substring in AD groupImportMapping

[Amar_Simha]

Hi Team,

We are currently using managedBy to retrieve owners from AD. We have two different types of IDs in AD and have two different endpoints to manage those lets call endpoint A & endpoint B. All the group owners set in AD are IDs which beloing to endpoint A. 

This is causing issue where we are not able to import group owners in endpoint B as corresponding account does not exist. As a workaround we are looking for a custom solution and to have this we need to have ID in any of custom property. As we know, DN is retrieved when managedBy is mapped to custom property.

I wanted to check if substring is supported in groupImportmapping for AD connector extract only ID from DN.

Eg. Owner DN - CN=emp01,ou=users,dc=abc,dc=xyz,dc=com

expected - emp01

Please share your views.

[naveenss]

Hi @Amar_Simha  I don't think this is doable using the substring in groupImportMapping. 

You might need to run a Sav4Sav job in trigger chain after the AD import to alter the data in the custom property.

[Amar_Simha]

Thanks @naveenss for the update. So Substring function is not supported in groupImportMapping field? Is there a documentation on javascript functions supported in that field in AD connector.? please suggest.

[rushikeshvartak]

String functions are not supported during data import in AD connector . Please use enhanced Query

[Amar_Simha]

Thanks @rushikeshvartak , can you possibly help with an example for the same?

[rushikeshvartak]

SELECT SUBSTRING_INDEX(SUBSTRING_INDEX(a.customproperty1, '=', -1), ',', 1) AS accounts__customproperty20 , accountkey as accounts__primarykey from accounts where endpointkey =100 

[Amar_Simha]

Thanks @rushikeshvartak for the query, the custom propery is to be udpated at entitlements level. I am working on tweaking the query, just wanted to check if enhanced query is supported for entitlements.

[rushikeshvartak]

Its supported and validated