Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

When you add an attribute mapping rule there is also an option to add an attribute transform rule.

Image RemovedImage Added

This is for situations such as:

  • where the value of an attribute is correct, but not presentable
    • e.g. turn a value of 'CN=Lixiang YuFilius Flitwick , DN=Development Teaching Staff, DN=ad, DN=yourdomainhogworts, DN=sch, DN=netuk' into 'StaffProfessor'
  • where the value you need for an attribute is not available from your system, but you can infer it from other values that are
    • e.g.  you have attributes that identify the department and job role of a user, but need a value that tells you the country they're based inif role contains Staff and house has a value, then set headOfHouse = true.

You set up attribute transform rules in a similar way to how you map permission sets:

...

If more than one set of conditions matches, then the attribute will have more than one value. All values are passed if that attribute is released, and all values are used by statistics if it is reportable. Unfortunately the interface cannot display muliti-valued attributes on accounts at the moment.

You cannot use transformed values in other transformations.

Expand
titleMulti-valued attributes

Include Page
_multivaluedattributes
_multivaluedattributes

Example

Scenario:

An organisation has offices in 20 cities around the world. The directory they have connected to OpenAthens can pass the name of the office (e.g. Abuja office), but not the country. All users have access to the same set of resources and are not separated by sub-organistaion or permission set.

...