Provisioning

The Sybase (SAP ASE) connector supports provisioning, allowing you to create and manage accounts and entitlements in Sybase (SAP ASE) directly from SailPoint.

Prerequisite: Your system is configured for provisioning.

When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.

When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.

For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.

Important

This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.

Default Create Account Attributes

Note

Attributes marked with an asterisk (*) are mandatory.

Account Attribute	Generator	Description
native_identity*	Create Unique Account ID	This generator uses the value in the Pattern Used field to generate a unique DN for the new account
password*	Create Password	This generator creates an initial password for the new account that matches the password policy assigned to the associated Sybase SAP ASE source in SailPoint.
password_expiration_interval	Disable	The user password expiration interval expressed in days. You can set this from 0 to 32767 days.
default_database	Disable	The default user database
default_language	Disable	The default language
full_name	Disable	The full name of a user

Provision Password Expiration Interval Attribute

If the Password_Expiration_Interval attribute is not part of Create Profile, then use the following API to update the Create Profile form.

Get the JSON response:

Method: GET

URL: https://{url}/api/accountProfile/get/<source_id>?usage=Create

Copy the JSON response from the above API and use it as an input for the following API.

Method: Post
URL: https://{url}/api/accountProfile/update/<source_id>?usage=Create
Content-Type: application/json
Body:

{
    "attributes": {},
    "isRequired": false,
    "name": "password_expiration_interval",
    "transform": null,
    "type": "string"
}

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.