none
Is "Declared (Import Filter)" still only for the AD MA? RRS feed

  • Question

  • I cannot find a definitive answer in the docs.  In my SQL MA, I have this option available in the Connector Filters.  Old information says that this feature is only for the AD MA.  Is this still true?

    Thanks!

      

    Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx

    Tuesday, April 23, 2019 3:39 PM

All replies

  • Mike,

    I have tested it and it works. What happens is that it still queries everything in the view or table but then it doesn't persist it in the ConnectorSpace like it would if it was just a  Declared Filter. So you are still better off filtering it by limiting what goes in the table, or more likely limit it with a view.


    David Lundell, Twitter | Hire Identity Managed | FIM Best Practices book | How to Be an MVP in Life book

    • Proposed as answer by Leo Erlandsson Wednesday, June 26, 2019 6:58 AM
    • Marked as answer by Mike H Leach Wednesday, June 26, 2019 7:03 PM
    • Unmarked as answer by Mike H Leach Wednesday, June 26, 2019 8:21 PM
    Wednesday, June 26, 2019 2:50 AM
  • EDIT:  I take that back.  The declared is not working.  I have a SQL View with 38,000 users.  I verified that I have a few thousand with a status of Inactive.  But, the filter is not filtering those users at all.  I tested this with 2 MAs.  One with a filter and one without.  The same number of objects imported into the Connector Space.  Could I be missing something?

    Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx


    Wednesday, June 26, 2019 7:03 PM
  • Hi,

    Could you post screenshots of your configured filter and some objects you'd expect to be filtered?

    Thanks

    Br,

    Leo


    Did my post help? Please use "Mark as answer" or "Propose as answer". Thank you!

    Thursday, June 27, 2019 9:39 AM
  • Here is a screen from the filter.  The object below it should have been filtered out and not imported to the CS.  My understanding is that by keeping those filters separate makes them "OR" filters.  Correct?

    Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx


    Thursday, June 27, 2019 12:39 PM
  • Let me elaborate. What happens is that it does get imported into the Connector Space and then during the sync the objects get filtered and then deleted from the Connector Space (hence it doesn't persist in the connector space). Which is why you are still better off doing a view and filtering with the where clause.

    David Lundell, Twitter | Hire Identity Managed | FIM Best Practices book | How to Be an MVP in Life book

    Thursday, June 27, 2019 7:08 PM
  • Ah.  Ok.  I think this explains what I thought was an issue on one of my other SQL MAs connected to their Epic SQL view.  Every full import "added" 25k records.  The connector filter was "Declared (Import Filter)".  So, it was essentially removing those on sync and then adding them back in on the next Full Import?

    Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx

    Friday, June 28, 2019 2:16 PM
  • Mike,

    Yes, the import will add the records to the CS and then the sync will delete those CS records that match the filter.


    David Lundell, Twitter | Hire Identity Managed | FIM Best Practices book | How to Be an MVP in Life book

    Wednesday, July 3, 2019 4:02 PM