Machine Account Attributes
Machine account attributes are used in provisioning configurations for machine accounts.
After you have created the required machine account subtypes, you can use the machine account attributes to provision machine accounts in your SailPoint tenant.
Refer to Machine Identity Security Overview for more information.
Note
Attributes marked with an asterisk (*) are mandatory.
Machine Account Provisioning Attributes
Machine account creation uses the same source attributes as standard service principal provisioning. For the complete list of supported attributes and their descriptions, refer to Account Profile for Service Principal.
| Create Machine Account Attribute | Description |
|---|---|
| spn_appDisplayName* | Display name for the Microsoft Entra ID application. Used to create the associated service principal (machine account). |
| spn_appId | Existing application (client) ID to associate with service principal creation/update flows. |
| spn_appTemplateId | Microsoft Entra ID application template ID used for template-based app creation. |
| spn_appTemplateName | Human-readable name of the application template. |
| spn_homepage | Homepage URL for the application object. |
| spn_loginUrl | Login URL configured on the application/service principal. |
| spn_logoutUrl | Logout URL configured on the application/service principal. |
| description | Description text for the application/service principal object. |
| spn_tags | Tags to set on the service principal. Multi-valued attribute. |
| spn_owners | Object IDs / references of owners assigned to the service principal/application. Multi-valued attribute. |
| spn_app_keyCredentials | Key credential definitions (certificate-based credentials) for the application object. Multi-valued attribute. |
| spn_passwordCredentials | Password credential definitions (client secrets) for the service principal. Multi-valued attribute. |
| spn_app_passwordCredentials | Password credential definitions (client secrets) for the application object. Multi-valued attribute. |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.