Get IdM accountId in per-account reconciliation workflow

Question

I'd like to get IdM accountId in per-account reconciliation workflow. But $(accountId) just returns the resource's id, e.g. CN=ABC 001,OU=IT,DC=ABC,DC=COM. How can I get the IdM accountId, e.g. abc001, in the workflow, so that I can modify the user's view?

Answer 1

Hi Anders,
Yes this is a tricky one, here's some code to get the IdM accountId given the resource accountId, hope this helps.
<Rule name='Find AccountId Given Resource ID and Identity'>
        <RuleArgument name='resourceIdentity'/>
        <RuleArgument name='resourceId'/>
        <rule name='RuleLibrary_UseCase2:Find AccountId Given Lighthouse Attr'>
          <argument name='attrName' value='resourceAccountIds'/>
          <argument name='attrValue'>
            <concat>
              <ref>resourceIdentity</ref>
              <s>@</s>
              <ref>resourceId</ref>
            </concat>
          </argument>
          <argument name='comparison' value='equals'/>
        </rule>
      </Rule>
      <Rule name='Find AccountId Given Lighthouse Attr'>
        <RuleArgument name='attrName'/>
        <RuleArgument name='attrValue'/>
        <RuleArgument name='comparison'/>
        <block>
          <defvar name='queryOptions'>
            <new class='com.waveset.object.QueryOptions'/>
          </defvar>
          <invoke name='addOrderBy'>
            <ref>queryOptions</ref>
            <s>name</s>
          </invoke>
          <invoke name='setBuffered'>
            <ref>queryOptions</ref>
            <Boolean>true</Boolean>
          </invoke>
          <invoke name='setOnlyNames'>
            <ref>queryOptions</ref>
            <Boolean>true</Boolean>
          </invoke>
          <invoke name='addCondition'>
            <ref>queryOptions</ref>
            <new class='com.waveset.object.AttributeCondition'>
              <ref>attrName</ref>
              <cond>
                <ref>comparison</ref>
                <ref>comparison</ref>
                <s>equals</s>
              </cond>
              <ref>attrValue</ref>
            </new>
          </invoke>
          <index i='0'>
            <invoke name='toList'>
              <invoke name='listObjects'>
                <invoke name='getLighthouseContext'>
                  <ref>WF_CONTEXT</ref>
                </invoke>
                <invoke name='findType' class='com.waveset.object.Type'>
                  <s>User</s>
                </invoke>
                <ref>queryOptions</ref>
              </invoke>
              <s>name</s>
            </invoke>
          </index>
        </block>
      </Rule>