When you add an attribute mapping rule there is also an option to add an attribute transform rule.
This is for situations such as:
CN=Filius Flitwick , DN=Teaching Staff, DN=ad, DN=hogworts, DN=sch, DN=uk
' into 'Professor
'role
contains Staff and house
has a value, then set headOfHouse = true
.You set up attribute transform rules in a similar way to how you map permission sets:
You can have only have one rule of any type per target attribute.
If more than one set of conditions matches, then the attribute will have more than one value. All values are passed if that attribute is released, and all values are used by statistics if it is reportable. Unfortunately the interface cannot display muliti-valued attributes on accounts at the moment.
You cannot use transformed values in other transformations.
An organisation has offices in 20 cities around the world. The directory they have connected to OpenAthens can pass the name of the office (e.g. Abuja office), but not the country. All users have access to the same set of resources and are not separated by sub-organistaion or permission set.
Management want statistics reports by country.
Because we want to use this in reports, we first must set up a text attribute in the schema editor and make sure it is marked as reportable. This example will assume one has been set up with a target name of country
.
Next we add some transform rules along the lines of: When any of these match (office contains Edinburgh, office contains Bristol) the output value is 'UK'.
Add conditions and outputs for each country, then click done and save.