Provisioning Policy Attributes

This section provides the provisioning policy attributes for the MongoDB Cloud - Database connector.

When SailPoint provisions new accounts to the MongoDB Cloud - Database source, it uses the attributes on the Create Profile page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.

Important
This page describes the configuration of the default Create Profile. However, SailPoint recommends that you work with Services to define a Create Profile specific to your company's needs.

Create Account Attributes

The following table lists the create account provisioning policy attributes of MongoDB Cloud - Database Connector.

Note
Parameters marked with an asterisk (*) are mandatory.

Account Attribute

Generator

Description

Database Name*

Static

The database used to authenticate the user

  • Database Name must be admin for Password Authentication and LDAP Authentication, where LDAP Auth Type is GROUP.

  • Database Name must be $external for X.509 Authentication and LDAP Authentication, where LDAP Auth Type is USER.

  • Database Name must be admin for SCRAM Auth Type.

Username*

Create Unique Account ID

The username used for authentication.

Authentication Method

Static

The authentication method supported by MongoDB Cloud managed system

The expected values are:

  • Password Authentication

  • X.509 Authentication

  • LDAP Authentication

Password

Create Password

The password associated with the specified username

X509 Type

Disable

The authentication type using the X.509 certificate

The expected values are:

  • MANAGED

  • CUSTOMER

LDAP Auth Type

Disable

The authentication type using the LDAP credentials

The expected values are:

  • USER

  • GROUP

Delete After Date

Disable

ISO-8601-formatted UTC date after which point Atlas MongoDB deletes a temporary user. You can't set this parameter for a permanent user.

Note
This is not applicable for the X.509 Auth Type user, because a X.509 Auth type temporary user cannot be created.

The date format is YYYY-MM-DDThh:mm:ssZ. For example, you can use 2020-01-01T08:06:48Z. You may include an ISO-8601 time zone designator to ensure that the delete-after date occurs with respect to the user's configured local time zone.

The date you specify must be in the future and within one week of the time when you make the API request.