Joiner Processing in Rapid Setup

The Joiner section is where you configure application behavior and processes when a new user joins your organization.

Although populations, birthright roles, and provisioning policies do not have to be created at this point, for features within joiner to work effectively, the user is advised to create them before configuring joiner processing

Note: Leaver events take priority over joiner events. If an identity is eligible for both a leaver event and a joiner event, the joiner event will not be launched.

Option

Description

Perform Account-Only provisioning

Create an account for the joining identity on this application, even if no entitlements exist for the account.

Identity Selection

This option is used only if Perform Account-Only Provisioning has been enabled. Identity Selction lets you choose which identities should be provisioned with accounts only:

  • Everyone – provision all identities with accounts only.
  • Filter – use an XML filter to select identities for account-only provisioning. Enter the filter XML in the text box. See XML Filter Example.
  • Script – use a BeanShell script to select identities. Enter the BeanShell source in the text box.
  • Rule – use a rule to select identities. You can select from existing rules of type IdentitySelector.
  • Population – use a population to select identities. Populations are defined under Intelligence > Advanced Analytics.

Automatically Start Joiner Processing for Newly Created Identities

During aggregation, if a new identity is created, automatically start joiner processing on it.

This option is not available for non-authoritative accounts when the global joiner configuration is set up to Exclude Uncorrelated Identities. See Joiner Configuration.

Joiner Email Instructions

Use this field to add any application-specific instructions to the Joiner Completed notification email that is sent to the manager or workgroup responsible for the identity's access.

See Joiner Configuration for more information about joiner notification emails.

Joiner Email Password Instructions

Use this field to add any application-specific instructions to the end of the Joiner Temporary Password notification email that is sent to the manager or workgroup responsible for the identity's access.

See Joiner Configuration for more information about joiner temporary password emails.

XML Filter Example

You can use an XML-based compound filter in the Identity Selection box to filter identities. The filter should include property values and logical operators for selecting identities.

Here is an example of a compound filter that will select all identities in the Accounting department that are NOT in either the Europe or Americas regions:

Copy

Compound Filter For Selecting Identities

<CompoundFilter>
<CompositeFilter operation="AND">
  <CompositeFilter operation="NOT">
    <CompositeFilter operation="OR">
      <Filter operation="EQ" property="region" value="Europe" />
      <Filter operation="EQ" property="region" value="Americas" />
    </CompositeFilter>
  </CompositeFilter>
  <Filter operation="EQ" property="department" value="Accounting" />
</CompositeFilter>
</CompoundFilter>

For more information on using compound filters, refer to these articles on Compass (login required):