IAS/IPS - Need help on passwordStatus target transformation

[VL1]

Hi Team,

@Yoganand @ChrisPaine or any other team member who can help me on this:

I am trying to build the code as below where for password status if the login method is PWD and falls in the respective group, it should be enabled, else it should be disabled.

Requirement is - If login method is PWD, then the password status is enabled and if it is SSO or empty it should be disabled. How can we do this in the Target Transformation?

If user is from G1 group - password status disabled.

If user is from G2, G3, G4 group - password status enabled.

Scope: every update.

I've written the transformation as below however i feel it is incorrect.

For G1 Group – Should be disabled.

{

                "targetPath": "$.passwordStatus",

                "condition": "($.loginMethod == 'SSO')",

                "constant": "181fb68d-f959-4747-8929-967fb22c4b54",

                "constant": "disabled",

                "scope": ""

            },

For G2 Group – Should be enabled.

{

                "targetPath": "$.passwordStatus",

                "condition": "($.loginMethod == 'PWD')",

                "constant": "0901d15b-0418-4624-b39f-6c50da7b4a2d",

                "constant": "enabled",

                "scope": ""

            },

For G3 Group – Should be enabled.

{

                "targetPath": "$.passwordStatus",

                "condition": "($.loginMethod == 'PWD')",

                "constant": "2ec92105-3ef3-43fd-b651-defdadff4524",

                "constant": "enabled",

                "scope": ""

            },

For G4 Group – Should be enabled.

{

                "targetPath": "$.passwordStatus",

                "condition": "($.loginMethod == 'PWD')",

                "constant": "65aee695-b017-4ad7-9fcf-54a38ab00320",

                "constant": "enabled",

                "scope": ""

            },

Is there anything simpler than apart from using the groups.

Request you to please help.

Regards,

[dyaryura]

Hi

Not sure why you explicitly need groups, but for group assignments you need to use a different transformation, i.e. with API v2:

https://help.sap.com/docs/identity-provisioning/identity-provisioning/enabling-group-assignment

I'm wondering in general if this transformation works for you. I'm using API v2 as per https://me.sap.com/notes/3437692

but in a recent migration some days ago I've noticed that the loginMethod attribute was not pulled from SF itself so, the rest of the transformations i make do not have any effect. I've even tried manually with postman and the attribute is not returned.