Azure Account Status

[sbomma]

I am able to successfully pull in Azure accounts using a REST ADC (Graph API) in IGL 7.2 P02 into IGL

I am trying to find if an account is enabled and none of the below attributes work:

accountEnabled

blockSignIn

I get an error when I add the above in the Collector Mapping Parameters:

$.value

.accountEnabled

When I run a test - do not get any results: 

{$.value

.userPrincipalName=999, $.value

.displayName=999, $.value

.mail=999, $.value

.accountEnabled=0}

When I use Postman to retrieve - I get the below for each account. Would like to understand how this translates in IGL

 "accountEnabled": true

[IanStaines]

I could not see that anyone has mapped accountEnabled using the Azure collector.  Not to say it cannot be done, but I do not have an example of it working or not working.

[sbomma]

Thanks Ian. If we cannot map the account status, am wondering how we would understand account is disabled or enabled and perform those operations from IGL on the end-point(here Azure). Does RSA have a recommendation?

[IanStaines]

I did not say the account status could not be mapped.

[IanStaines]

I am going to move your post to the "RSA Identity Governance & Lifecycle 7.2 Enablement Hub".  That group has a more specific audience for the new Generic REST collector and perhaps someone in that group may be able to assist you.

RSA Identity Governance & Lifecycle 7.2 Enablement Hub

[sbomma]

Thanks Ian. Hoping to hear from RSA or others that have done a similar integration

[JamiePryer]

Pradeep Kumar‌ thoughts?

[IanStaines]

As far as I have been able to determine no one has attempted to map this attribute except yourself.  

We do expect the community to eventually capture this type of information but this is still a pretty new collector. 

[IanStaines]

I am sorry it appears no has been able to answer your question.

Were you able to find your own solution yet?

[IanStaines]

I did not get any reply so I am going to mark this thread as assumed answered.