Hello everyone,

We are trying to read level 10 roles that are assigned to identities in IDM's eDirectory, as permissions into IG.

For this, we have configured an App Permission Collector and the whole list of level 10 roles is read correctly into IG. However, we also want to map the assignment of those roles to the identities that are already collected in IG, by using the nrfMemberOf attribute present in the identity schema. But it is not working, what we configured was the section of "Collect holder to permissions mapping" to read identities and indicated in the "Holder permission(s)" field, the nrfMemberOf attribute where the list of assigned roles is present in the identities. We already checked the Administrative Guide, but there is no more information about how to fulfill this type of collection. Do you have any advice or comment on what is wrong with our configuration?

Thanks in advance,