• State Verified Answer
  • Replies replies
    2
  • Subscribers subscribers
    16
  • Views views
    215
  • Users 0 members are here

Is it possible to create custom composite attributes?

Bernhard Grübl

With IG 4.2 it is now possible to use the "isManager" subcondition for condition expressions in request policies.

This is a great addition, since before this could only be done by using coverage maps, which might legally qualify as torture.

With this great new addition I am curious, is it possible to create one's own composite attributes to include in such a condition? For one of our customers we have quite a lot of them from the good old IDM dashboard days. While it was very practical to use there, this is now a bit of a problem in IG, since, apart from the default supervisor attributes, there seems to be no way to include those in a request policy condition. Apart from possibly using coverage maps, which I would really like to avoid.

Is there a new solution for this in IG 4.2 as well?

Or has someone with a similar starting point found a viable way to depict this outside of using coverage maps?

  • Verified Answer

    +1  

    Hello,

    1) It is not possible to create custom Attribute that is of type composite within Identity Governance

    2) If you are in the Requesters -> All Users within a Request Policy, the ability use the expression builder has been available since 3.7.0 for the Off-Cloud customers (3.7.0, 3.7.3, and current 4.2.0). With that, depending upon what one sets on the Attribute (custom or one of the default ones) controls if it appears in the Search control

    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    OpenText Cybersecurity

  • 0 in reply to   

    Hello Steve,

    thank you!

    I am aware of the attribute settings, I was curious specifically about reciprocal relationships depicted in DN's in LDAP like the manager attribute and whether those could be used similarly in IG to gather more information about the connected object.

    Thank you for your answer!

    This is then probably an enhancement request. Or is that already planned?

    Best regards,

    Bernhard

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.