File Access Manager Classification

The File Access Manager Classification task is used when you are integrating with File Access Manager, to use File Access Manager's classification to flag and categorize entitlements within IdentityQ. This task retrieves classification data from File Access Manager and assigns it to entitlements according to the correlation logic that is defined in the applications that aggregate relevant account and group data, or in IdentityIQs File Access Manager global configuration settings.

Option	Description
Classification Customization Rule	You can use a rule to customize your classification object, for example to add or modify attributes in the object. Rules must be of the type "ClassificationCustomization" to appear in this selection list.
Automatically promote descriptions to this locale	The locale that any description that is included in the File Access Manager objects will be promoted to, by default. This is used if an existing description locale is not found.

Classification Filter Rule

The Classification Filter Rule feature on the File Access Manager Classification task is exposed as of version 8.4. It is used to narrow the scope of Classifications for the task. Like most rules, it accepts a SailPointContext and a Logger.

The return value is a QueryOptions that contains a Filter that is used to generate the SCIM query. The Filter supports "and" operations but not "or." If expression values include reserved URL characters, they need to be encoded.

Page size is now configurable on the task. This argument specifies the number of records fetched with each SCIM call to File Access Manager.

Several arguments added to the File Access Manager Classification task allow users to adjust its tolerance. They are Retry Limit, Retry Gap, and Max Errors.

Option	Description
Retry Limit	The number of times to retry a failed query before giving up and moving on.
Retry Gap	The number of milliseconds to wait before retrying a failed query
Max Errors	The number of times that the retry limit can be exceeded before giving up on the task.

After you complete customizing your task options, click Save for later use, or Save and Execute to save the task and run it immediately.