Skip to content

Managing Multi-Host Account Correlation

Correlation is the process of matching and assigning source accounts to identities. Correlation configuration compares the values of specific account attributes with the values of related identity attributes. When those attribute values match, the account is assigned to the identity.

Multi-host correlation enables bulk correlation of accounts for all sources within a multi-host group.

  1. Go to Admin > Connections > Multi-Host Sources and select a multi-host group.

  2. Select Edit to view configuration details about the multi-host group.

  3. From the left navigation, select Account Management > Correlation.

  4. Review the attributes for configuring the source:

    • The Identity Attribute is the attribute from the identity profile used to match the accounts.
    • The Account Attribute is the attribute on the source that Identity Security Cloud tests against the identity attribute.
    • The Operation field is always set to Equals. This field is not editable.

  5. Use the Identity Attribute dropdown list to select an identity attribute such as email, displayName, or uid. For effective correlation, attribute values should be unique among other accounts and identities. Refer to Using Custom Identity Attributes in Correlation for guidance on using custom identity attributes.

  6. Use the Account Attribute dropdown list to choose the account attribute that corresponds to the identity attribute you selected.

  7. Select Add Criteria to add identity attribute and account attribute fields to the correlation configuration.

  8. If your organization has a preferred attribute for identifying unique accounts, drag and drop the attribute pairing to determine the order in which attributes will be used to correlate accounts.

  9. To remove attribute pairings, select the Delete icon beside the pairing.

  10. Select Save to save your changes.

Correlation is applied to each source within the multi-host group during the sources next aggregation. If you change the account correlation for a multi-host group that contains a source that has already been aggregated, you should run another aggregation for that source. This allows unchanged accounts to be reexamined for correlation.

If Identity Security Cloud is unable to match account attributes to identity attributes, the account is considered uncorrelated and is not assigned to identities.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.