Review Join Data Report

In large and complex identity environments, it is important to be able to proactively enforce identity uniqueness to avoid ambiguity when it comes to keeping identities synchronized across multiple systems.  Where conflicts invariably do go undetected and result in ambiguous joins, it is important to identify them in a timely way to avoid loss of access and/or security violations.

The reviewJoinDataReport finds users who with questionable joins in HyperSync.  Unlike the Duplicate Joins Report, these are user records which are already joined to the Hyperverse but for whom there is some doubt as to the integrity of the join.  An example might be where multiple unrelated user records have been assigned the same employee number in HR, causing them to be incorrectly merged into a common user account record in AD.

{
  "Data": [
    {
      "$type": "SoftwareIDM.ReportingModule.Models.Report, SoftwareIDM.ReportingModule",
      "Id": "db4f9bc9-8eaf-454d-9ab5-cf01f619e7ca",
      "Name": "Join - Review Join Data",
      "UserId": null,
      "UserProfile": false,
      "Tags": null,
      "Roles": null,
      "CacheExpiration": "01:00:00",
      "Description": "",
      "Parameters": [],
      "DataSets": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.Workday: People",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Deleted",
              "Operation": "Null",
              "Value": "",
              "ObjectValue": null
            }
          ],
          "SubQueries": [],
          "MapRule": "",
          "MemoRules": [],
          "Aliases": null,
          "Name": "Workday",
          "Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
          "Include": [
            "DN",
            "Attributes",
            "Silo"
          ],
          "Limit": null
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.Azure",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Deleted",
              "Operation": "Null",
              "Value": "",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "ObjectType",
              "Operation": "Eq",
              "Value": "\"user\"",
              "ObjectValue": null
            }
          ],
          "SubQueries": [],
          "MapRule": "",
          "MemoRules": [],
          "Aliases": null,
          "Name": "Azure",
          "Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
          "Include": [
            "DN",
            "Silo",
            "Attributes"
          ],
          "Limit": null
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.QueryData, SoftwareIDM.ReportingModule",
          "Clauses": [
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Silo",
              "Operation": "Eq",
              "Value": "special.Identity Silo.AD",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "Deleted",
              "Operation": "Null",
              "Value": "",
              "ObjectValue": null
            },
            {
              "$type": "SoftwareIDM.PanelModel.Models.FilterClause, SoftwareIDM.PanelModel",
              "Field": "ObjectType",
              "Operation": "Eq",
              "Value": "\"user\"",
              "ObjectValue": null
            }
          ],
          "SubQueries": [],
          "MapRule": "",
          "MemoRules": [],
          "Aliases": null,
          "Name": "AD",
          "Type": "SoftwareIDM.PanelModel.Models.ObjectRecord, SoftwareIDM.PanelModel",
          "Include": [
            "DN",
            "Attributes",
            "Silo"
          ],
          "Limit": null
        }
      ],
      "ReportSets": [],
      "Relations": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Workday - AD",
          "LeftSet": "Workday",
          "RightSet": "AD",
          "LeftRule": "DN",
          "RightRule": "Attributes.employeeID",
          "AllowLeftOuter": true,
          "AllowRightOuter": true
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Relation, SoftwareIDM.ReportingModule",
          "Name": "Workday - Azure",
          "LeftSet": "Workday",
          "RightSet": "Azure",
          "LeftRule": "DN",
          "RightRule": "Attributes.employeeId",
          "AllowLeftOuter": true,
          "AllowRightOuter": true
        }
      ],
      "FieldProjections": [
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Employee_ID",
          "RelationName": "Workday - AD",
          "RelationSide": "Left",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Department",
          "RelationName": "Workday - AD",
          "RelationSide": "Left",
          "ValueRule": "Attributes.Department"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Location_Desc",
          "RelationName": "Workday - AD",
          "RelationSide": "Left",
          "ValueRule": "Attributes.Location_Desc"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Postal_Code",
          "RelationName": "Workday - AD",
          "RelationSide": "Left",
          "ValueRule": "Attributes.Postal_Code"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Name",
          "RelationName": "Workday - AD",
          "RelationSide": "Left",
          "ValueRule": "Attributes.First_Name + \" \" + Attributes.Last_Name"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "AD DN",
          "RelationName": "Workday - AD",
          "RelationSide": "Right",
          "ValueRule": "DN"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "AD Acccount Name",
          "RelationName": "Workday - AD",
          "RelationSide": "Right",
          "ValueRule": "Attributes.sAMAccountName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "AD Name",
          "RelationName": "Workday - AD",
          "RelationSide": "Right",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "AD employeeId",
          "RelationName": "Workday - AD",
          "RelationSide": "Right",
          "ValueRule": "Attributes.employeeID"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "AD postalCode",
          "RelationName": "Workday - AD",
          "RelationSide": "Right",
          "ValueRule": "Attributes.postalCode"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Azure Id",
          "RelationName": "Workday - Azure",
          "RelationSide": "Right",
          "ValueRule": "Attributes.objectId"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Azure UPN",
          "RelationName": "Workday - Azure",
          "RelationSide": "Right",
          "ValueRule": "Attributes.userPrincipalName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Azure Name",
          "RelationName": "Workday - Azure",
          "RelationSide": "Right",
          "ValueRule": "Attributes.displayName"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Azure employeeId",
          "RelationName": "Workday - Azure",
          "RelationSide": "Right",
          "ValueRule": "Attributes.employeeId"
        },
        {
          "$type": "SoftwareIDM.ReportingModule.Models.Projection, SoftwareIDM.ReportingModule",
          "Name": "Azure postalCode",
          "RelationName": "Workday - Azure",
          "RelationSide": "Right",
          "ValueRule": "Attributes.employeeId"
        }
      ],
      "Transformations": [],
      "Styles": [],
      "Sort": {
        "Field": "Employee_ID",
        "Direction": "Ascending"
      }
    }
  ],
  "Count": 1
}