Manage Identity Attributes
Identity attributes refer to properties of an identity, such as name, location, or organization name.
- Core attributes: Fixed standardized identity attributes which are included in campaigns and access reviews by default.
- Custom attributes: Non-standard identity attributes that are on-boarded from specific Orchestrated Systems, once connected, but are not included in campaigns and access reviews unless required. For example, you may have a core attribute Location which is included in campaigns and access reviews by default, while additional custom attributes, such as Area, City, or Zip Code must be configured, to support your business needs.
Overview
Oracle Access Governance automatically fetches core and custom attributes defined in an Orchestrated System. Details of attributes are automatically loaded into Oracle Access Governance when data is ingested from an Orchestrated System. If you create further custom attributes, following initial data load, you can refresh the Oracle Access Governance schema so that the latest custom attributes are included in the next data load.
You can use these attributes in Oracle Access Governance to perform various functions, such as running access review campaigns, choosing identities for identity collections, or applying attribute conditions to enable/disable the available identity data set.
- While creating a campaign, a Campaign Administrator selects custom attributes - Cost Center and Department ID to further refine the campaign selection criteria to run access review campaigns.
- While creating an identity collection, an Administrator can apply membership rules using the core and custom attributes. For instance, to create a senior management list of employees for the Accounting organization, create an identity collection to include employees where the Job Level is Director and above, and the Organization is Accounting.
- A custom attribute that is encrypted in your schema will not be available in Oracle Access Governance and won't show up on the Identity Attributes page.
View Attributes
As an Administrator, you can view, and search for available core and custom attributes, and determine which Oracle Access Governance features they are enabled for.
- In the Oracle Access Governance Console, from the navigation menu, select Service Administration , and then select Identity Attributes.
The Identity Attributes page is displayed. You can view the available core and custom attributes, which are displayed on the Core and Custom tabs respectively.
View Attribute Details
- Attribute name: Original attribute name as available in the Orchestrated System that is connected with Oracle Access Governance.
- Orchestrated system: Orchestrated system name from which the attribute is populated.
- Display name: Unique attribute name that will be used within Oracle Access Governance Console for easy identification and usage.
- Type: Data type of the attribute.
- Flags indicating where these attributes can been used:
- Identity details: If selected, attributes are
displayed in:
- Who Has Access to What functionality where you can view resource details for an identity.
- My Access Reviews functionality where you can perform access reviews and see review insights.
- Campaign selection: If selected, the attribute is available for use in user access review campaigns.
- Event-based Setup: If selected, the attribute is available for use in configure event-based triggers for identity access reviews.
- Manage Identities: If selected, the attribute is available for use in configure activation rules to manage identities from Oracle Access Governance, and to enable custom attributes in creating an identity collection.
- Identity details: If selected, attributes are
displayed in:
- Last updated by: Name of the administrator who last modified the settings for that identity attribute.
Search and Filter Custom Attributes
- Campaign selections: On or Off
- Event-based: On or Off
- Manage identities: On or Off
- Identity details: On or Off
Manage Core Attribute Settings
You can modify core attribute settings in a number of ways, including updating the Orchestrated System from which the attribute is populated, and applying rules to the attribute allowing you to perform data transformations on the inbound value.
Manage Custom Attribute Settings
You can modify custom attribute settings in a number of ways, including updating the Orchestrated System from which the attribute is populated, applying rules to the attribute allowing you to perform data transformations on the inbound value, and including/excluding the use of the attribute for certain Oracle Access Governance features.
Fetch Latest Custom Attributes
If you don't see the latest custom attributes in the list, click the Fetch attributes button.
This action will run the schema discovery on the orchestrated system, and fetch the latest schema objects to get the updated list of custom attributes. If new custom attributes are available, then the schema discovery process may take a couple of minutes to complete, and show the updated list of custom attributes.
Note:
If you have an encrypted attribute in your schema, then this process won't fetch and show up that encrypted attribute on this page.Whenever a new custom attribute is added, you first need to enable that attribute for the features where you want to use it.
Note:
This action won't ingest the attribute data from the orchestrated system but will just load the schema objects. To fetch and use the attributes' data, you either have to wait for the next upcoming scheduled data sync operation or manually run the data load operation. See the Configure Settings for an Orchestrated System topic.For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.
Access to Oracle Support
Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.