Virtual Attribute default value

Hello Community,

Does anyone know if there is a way for a virtual attribute to have a default value when a user get's synced in from AD?

I have a need for a boolean value for users and when a new user is created from One Identity manager to make that value false.

I'm not using a sync from Active Roles into One Identity manager. It's a direct to Active Directory btw.

I have another job that will check and make it true when needed. 

Thank you,

Lu

Parents
  • Not sure what you mean by "synced in".  Active Roles does not cache objects.

    Applying a default value is best done:

    1) For existing objects, use an Automation Workflow to find (using a Search Activity) objects missing the desired default, a use an Update activity to apply it.

    2) For new objects, set up a Property Value Generation policy rule within a Provisioning Policy that forces the value on new object creates / edits.

    Re 2), if the objects are actualyl being copied from somewhere (using the AR Sync Service perhaps), then the PVG should take care of applying the values for you.

    'Hope this helps and don't hesitate to ask if anything is not clear.

Reply
  • Not sure what you mean by "synced in".  Active Roles does not cache objects.

    Applying a default value is best done:

    1) For existing objects, use an Automation Workflow to find (using a Search Activity) objects missing the desired default, a use an Update activity to apply it.

    2) For new objects, set up a Property Value Generation policy rule within a Provisioning Policy that forces the value on new object creates / edits.

    Re 2), if the objects are actualyl being copied from somewhere (using the AR Sync Service perhaps), then the PVG should take care of applying the values for you.

    'Hope this helps and don't hesitate to ask if anything is not clear.

Children
No Data