Symantec Access Management

 View Only
  • 1.  string operation on an assertion attribute

    Posted Jan 29, 2019 06:54 AM

    Hi,

     

    In the federation partnership in the the assertion attribute field I need to check the value of employeetype) from AD and if that value equals C i need to concatenate C with the employeeid field in the assertion attribute.

     

    Please suggest how to implement this.

     

    Thanks,

    Pallavi.



  • 2.  Re: string operation on an assertion attribute

    Posted Jan 30, 2019 05:30 AM

    i looked into thread on the CA community and followed the steps below

    1.

    1. Built a named expression.
      1. #ContractorsEmployee
      2. Used the expression: (employeeType~BEGINS_WITH "C")? 'C'+employeeID:employeeID
    2. Created an attribute mapping on the user directory
      1. ContractorsEmployee
      2. Selection expression:  The definition should reference the Named Expression: #ContractorsEmployee
    3. Use ContractorsEmployee as the name of the attribute to send as per the screenshot below.

     

    However in the logs it is still not calculating the value of the expression.

     

    <ns2:Attribute Name="EmployeeId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
    <ns2:AttributeValue>ContractorEmployee</ns2:AttributeValue>
    </ns2:Attribute>

     

    Am i missing anything?



  • 3.  Re: string operation on an assertion attribute

    Posted Jan 31, 2019 07:41 AM

    I also followed some CA communities reference to use JUEL expression. However im unable to achieve my use case.

    I used the below expression in my Assertion Attribute and it seems to be giving me the result. 

    My im still not unable to concatenate the string.

    #{attr["employeeType"] == 'C' ? 'C':attr["employeeid"]}

    What i want to achieve is

     

    if EmployeeType = 'C'

    Then

    'c'+Employeeid

    Else 

    EmployeeId

    But somehow not able to find the concatenation function.Please help !!!!