Supported Aggregation Filters
Based on the configured Accounts or Groups Aggregation Filter, only the respective accounts or groups are aggregated into SailPoint.
Account Aggregation Filters
Configure a filter to define the scope of aggregated accounts. For example, if the added filter is status eq "STAGED" then only staged account will be aggregated into SailPoint.
Note
Custom attributes can only be captured by filters when Enable List Users With Search is enabled.
|
Aggregation Filters |
Description |
|
status eq "STAGED" |
Users that have a status of STAGED |
|
status eq "PROVISIONED" |
Users that have a status of PROVISIONED |
|
status eq "ACTIVE" |
Users that have a status of ACTIVE |
|
status eq "RECOVERY" |
Users that have a status of RECOVERY |
|
status eq "PASSWORD_EXPIRED" |
Users that have a status of PASSWORD_EXPIRED |
|
status eq "LOCKED_OUT" |
Users that have a status of LOCKED_OUT |
|
status eq "DEPROVISIONED" |
Users that have a status of DEPROVISIONED |
|
lastUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Users last updated before a specific timestamp |
|
lastUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Users last updated at a specific timestamp |
|
lastUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Users last updated after a specific timestamp |
|
id eq "00u1ero7vZFVEIYLWPBN" |
Users with a specified ID |
|
profile.login eq "login@example.com" |
Users with a specified login |
|
profile.email eq "email@example.com" |
Users with a specified email* |
|
profile.firstName eq "John" |
Users with a specified firstName* |
|
profile.lastName eq "Smith" |
Users with a specified lastName* |
|
profile.Custom_Integer_Array eq "23" |
Users with a specified array attribute* |
|
profile.Custom_String eq "Custom Value for String__Updated" |
Users with a specified custom attribute* |
Group Aggregation Filters
By default, the group Aggregation filter aggregates type eq "OKTA_GROUP" or type eq "BUILD_IN" groups.
|
Aggregation Filters |
Description |
|
type eq "OKTA_GROUP" |
Groups that have a type of OKTA_GROUP |
|
type eq "APP_GROUP" |
Groups that have a type of APP_GROUP |
|
type eq "BUILT_IN" |
Groups that have a type of BUILT_IN |
|
lastUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups whose profile was last updated before a specific timestamp |
|
lastUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups whose profile was last updated at a specific timestamp |
|
lastUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups whose profile was last updated after a specific timestamp |
|
lastMembershipUpdated lt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups whose memberships were last updated before a specific timestamp |
|
lastMembershipUpdated eq "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups with memberships which were last updated at a specific timestamp |
|
lastMembershipUpdated gt "yyyy-MM-dd'T'HH:mm:ss.SSSZ" |
Groups with memberships which were last updated after a specific timestamp |
|
id eq "00g1emaKYZTWRYYRRTSK" |
Group with a specified ID |
Account Status Mapping
The following table lists the mapped status of Okta on IdentityIQ.
|
Okta Account Status |
IdentityIQ Account Status |
|
PROVISIONED |
Active |
|
PASSWORD_EXPIRED |
|
|
ACTIVE |
|
|
RECOVERY |
|
|
DEPROVISIONED |
Disable |
|
SUSPEND |
|
|
STAGED |
|
|
LOCKED_OUT |
Locked |
Application Aggregation Filters
Configure a filter to define the scope of aggregated applications. Configuring this filter is optional. For more information, refer to Additional Configurations.
|
Aggregation Filters |
Description |
|---|---|
|
status eq "INACTIVE" |
Users that have a status of INACTIVE |
|
status eq "ACTIVE" |
Users that have a status of ACTIVE |