Transformation rule
Quick answer
Transformation logic for shaping identity attributes from source data in SailPoint IdentityIQ.
Key takeaways
- Derives identity attribute values from source data
- IIQ uses rules; ISC uses JSON transforms
- Common: uppercase, concat, lookup, conditional default
- Runs during attribute promotion in refresh
Purpose
Transformation logic derives an identity attribute value from one or more source attributes when the identity is refreshed or a mapping is applied.
Rule vs transform
IdentityIQ supports both classic transformation rules and, in Identity Security Cloud, JSON transforms. Both convert raw source values into the clean value stored on the identity.
Common transformations
Uppercasing, concatenation, lookup tables, conditional defaults, and normalising department or location codes into standard values.
Order of operations
Transformations run as attributes are promoted during refresh, so they see the aggregated source data and feed roles and policies downstream.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What does a transformation produce?
- A. A provisioning plan
- B. A clean identity attribute value
- C. A work item
- D. A connector
Show answer
B. A clean identity attribute value
Transformations convert raw source values into the clean attribute stored on the identity.