Identity Director Administration Guide
This is not the latest version of Identity Director documentation.View available documentation.
Configure person service attributes
In the Management Portal at Entitlement Catalog, on the Attributes tab of the service page, configure person attributes to retrieve any identifiers or attributes for a person in a workflow action. This enables you to retrieve, for example, the manager of an actor in an Approve Transaction workflow action.
Configuration
|
Field |
Explanation and Tips |
|---|---|
|
Restricted information |
Mask the attribute value in the Management Portal. This ensures you can be compliant with the privacy laws of your country or organization, as unauthorized administrators do not have access to private information like e-mail addresses, phone numbers, social security numbers, etc. This functionality applies to the Management Portal only; restricted information is still shown in the Web Portal.
|
|
Person identifier |
Specify the person identifier for which Identity Director should retrieve data. |
|
Initial value |
Optionally, specify a default value of the service attribute. |
for restricted attributes and their placeholders anywhere in the 
for restricted attributes and their placeholders. At You can force mandatory input by enabling Attribute may not be empty after workflow input from actor.
Example: Determine consecutive approvers using a person service attribute
Consider the following scenario:
You want to create a service to request a mobile phone:
- Users can select available models from a list.
- The manager of the requester must approve the request.
- If the phone costs more than $600, the manager of the manager must also approve the request.
For a service with single approver (just step 1 and 2 above), you could create an Approve Transaction workflow action that is assigned to the manager of the requester:
For multiple (dynamic) approvers, you can use a person service attribute.
- To prepare the attribute (for example 'Approver') for step 2, you can set the initial value with the same placeholder as above:
- In the Approve Transaction workflow action for step 2, you now define the actor using the 'Windows user account' identifier of the person identified by the 'Approver' service attribute:
- In the Approve Transaction workflow action for step 3, you again define the actor using the 'Approver' service attribute.
But this time you use the 'Windows user account of manager' person attribute of the person identified by the 'Approver' service attribute:
After this workflow action, insert an action that decides if additional approval is necessary. For example, a Compare Attributes workflow action.
Placeholders
When you insert a person service attribute as a placeholder in actions, you can use the following options to retrieve data of the person identified by the attribute:
|
Placeholder |
Explanation |
|---|---|
|
#Service[Person.{ServiceAttributeName}.Name] |
Resolve the name of the person determined by the service attribute. |
|
Person identifier |
|
|
#Service[Person.{ServiceAttributeName}.Identifier.{PersonIdentifierName}.{Data}] |
Resolve data of the specified identifier of the person determined by the specified service attribute.
Example
Resulting placeholder: |
|
Person attribute (Text) |
|
|
#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}] |
Resolve data of the specified text person attribute for the person determined by the service attribute.
Example
Resulting placeholder: #Service[Person.PSAExample.Windows user account of manager.Description] |
|
Person attribute (Password) |
|
|
#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}] |
Resolve data of the specified password person attribute for the person determined by the service attribute.
Example
Resulting placeholder: #Service[Person.PSAExample.CRM Password.ClearText] |
|
Person attribute (Table) |
|
|
#Service[Person.{ServiceAttributeName}.{PersonAttributeName}.{Data}] |
Resolve data of the specified table person attribute for the person determined by the service attribute.
Example
Resulting placeholder: #Service[Person.PSAExample.Movies.EntireColumn.MovieDuration] |
You can also click 
to select from a list of available placeholders and insert them in the field.
Copyright © 2019, Ivanti. All rights reserved.