Solving the Uniqueness Challenge

By Michael Govek

Elevator Pitch

The purpose of the talk Is to demonstrate how iC Consult leveraged the recently released Utility Library for uniqueness checking across multiple sources.

Description

The ability to check for uniqueness when generating a user ID, email, etc. has been a challenge. Some of us may have solved It by writing complex rules or having the customer build a database with sync jobs pushing data from multiple AD domain and Azure AD so SailPoint can perform uniqueness checking in a single location. In this talk we will outline how SailPoint’s recently released Utility Library can be used to check for uniqueness across multiple sources without these work arounds. Solution Overview • Created a rule using the recently released Utility Library to search multiple sources for uniqueness to generate sAMAccountName, email and UPN HOW • Identified attributes to make searchable • Created Index attributes used for search • Apply new methods In rules o attrSearchCountAccounts(): This will be helpful to use for uniqueness search o attrSearchGetIdentityName(): This will be helpful in say a correlation rule. • TESTING METHODS The following testing methods were used to reduce Iterations: o Method 1: JUnit Testing - plug In script locally to read beanshell o Method 2: JMeter IDE DEMO/VISUALS • Sanitized code built for client (Walk-through) • Testing (Demos) o JUnit Testing o JMeter IDE

Notes

Myself along with Julian Agbeke will speak to the subject. A little about each of us. I am the iCC IdentityNow Practice owner. My speaking will be at the beginning providing a brief description of this challenge and why the utility library enabled us to develop a solution quickly. Julian is our IdentityNow Engineer and will provide the technical details of and testing demo.