Edit Identity Attributes Page

Use the Edit Identity Attribute page to create and edit identity attributes including the display name, advanced options and source mapping.

The maximum number of searchable attributes you can create is defined during the application installation and configuration process and controlled from the System Setup pages. The default number is ten (10). See Create Icons to Represent Specialized Account Attributes.

To support the governance of bots, IdentityIQ has three standard attributes in the identity object that enable you to do things like run a focused certification on just bots.

The attributes are:

  • Type: an attribute to define the type of identity. The standard values for this attribute are:

    • Employee

    • Contractor

    • External / Partner

    • RPA / Bots

    • Service Account

However, you can define your own types in addition to these 5, via editing XML in debug.

  • Version – an attribute to indicate what version of software the bot is using. This attribute is intended to be used only for bots.

  • Administrator – the owner, certifier, of the bot. This is used instead of manager for bots throughout IdentityIQ.

Field

Description

Identity Attribute:

Attribute Name

The name of the attribute as it is used throughout IdentityIQ. For example, this the name used to identify this attribute in rules.

Display Name

The IdentityIQ user assigned name.

Advanced Options:

Attribute Type

Select from the following attribute types:
String – creates a text-editable field.
Identity – creates a drop-down list from which you choose an existing identity.

Edit Mode

Enable editing of this attribute from the Identity pages.
Read Only – this attribute cannot be edited from the Identities pages.
Permanent – changes made on the identities pages are not overwritten by refresh tasks.
Temporary – changes made on the edit identities pages are overwritten when an aggregation task brings over a new (changed) value for the attribute.

Searchable

Enable this attribute for use in searches and filtering through IdentityIQ.

Multi-Valued

Specify attributes for which multiple values might be returned during aggregation.
Attributes flagged as multi-valued are stored as a list. Even objects that have a single value for a multi-value attribute are stored as a single-item list.
Multi-valued attributes are used for queries throughout the product.

Group Factory

Enable this attribute for use in creating groups used for analytical purpose throughout IdentityIQ.

Value Change Rule

Specify a rule to run every time a change is detected on this attribute during the aggregation process. For example, a rule can be written to send change notifications, request change approval or launch a certification.

Click the [...] icon to launch the Rule Editor to make changes to your rules if needed.

See Using the Rule Editor

Value Change Workflow

Specify a business process to run every time a change is detected on this attribute during the aggregation process. For example, a business process can be written to send change notifications, request change approval or launch a certification.

Sync with Workflow

To use a business process handling for attribute synchronization.

If you set the source and target mapping to the same application / attribute pair, it creates circular references and where the values continuously change with every attribute synchronization.

Source Mappings:
The list of application / attribute pairs from which employee attributes are derived. If the required data is unavailable on the primary source, the collection process continues down the list of configured sources until the information is found.

Target Mappings (Only available for Identity attribute types):
When creating or editing an Identity attribute, use the Target Attribute options to define targets that the basis for attribute synchronization. Click Add Target to display the Add a target to the AttributeName attribute dialog, and complete all of the information.