Attribute Sync for
Your Whole Ensemble
Millions of Users, Synchronizing Both Simple and Complex Attributes with Minimal Effort.
What is attribute sync?
Attribute Sync updates attributes on your target systems when something changes. For example when a user’s first name changes in Workday, that new name ought to be updated in Active Directory, Office 365, Oracle ERP, SalesForce, and any other system that displays the user’s name.
Tricky Attribute Sync Scenarios
IIQ should distribute the user’s preferred name if one exists – but not on every target application. Some applications only want the legal name.
A single source field change ought to trigger a multitude of downstream changes. Or, alternatively, a multitude of source changes ought to trigger the same downstream change.
Values require complex transformations to make them suitable for the great variety of systems in your environment, even something as complex as rendering a slew of attributes and other values into JSON.
IIQ should update only a subset of accounts in one target system (e.g., a user’s primary account) but not others (e.g., a secondary admin account).
IIQ should skip certain field updates, but only sometimes. Or, IIQ should only set an initial value, leaving it alone after it’s been set.
Setting an attribute value is more complex than just “replace the existing value”. Some applications require that you remove the previous value before you add a new one.
IIQ should synchronize attributes after certain Identity changes, but not every change
Best Practices
As IIQ developers ourselves, we want our Harmonizer module to promote a high-quality developer and administrator experience.
- All configuration can be stored and modified easily in source control.
- Although the defaults work quite well, virtually every feature can be customized or extended.
- The module builds on native and supported IIQ functions, like Lifecycle Events and Workflows.
- Testing and admin tools are provided, allowing you to simulate behavior in your development environment before you deploy it.
Accelerator pack replacement
SailPoint’s official “Accelerator Pack” is no longer supported in the latest versions of IdentityIQ in favor of Rapid Setup”. Unfortunately, Rapid Setup does not include an Attribute Sync component.
For those using Accelerator Pack for its advanced attribute sync features, our Harmonizer can be a quick replacement.
How to Get Harmonizer:
Please contact Instrumental Identity using our Contact form if you are interested in this module or any of our other SailPoint IIQ work!
