Skip to main content

EmpowerID Admin Lab 6: Configuring Attribute Flow Rules

Purpose​

This lab guides you through configuring attribute flow rules for each account store connected to EmpowerID. Attribute flow rules define the synchronization schema to ensure attributes are updated across systems based on the authoritative source of the data.

Prerequisites​

  1. Access to the EmpowerID training environment.
  2. A clear understanding of the authoritative sources for attribute data in your organization.

Steps​

1. Navigate to Attribute Flow Rules​

  1. Open your browser and log in to EmpowerID.
  2. Go to Admin > Attribute Flow Rules.
  3. Locate the attributes and their current flow settings for the account stores (e.g., HR Worker Flat File, Entra ID, AD Domain, Sales Management System).

2. Review Current Attribute Flow Rules​

  1. Use the Advanced Search filter to view the flow rules for the HR flat file account store.
  2. Confirm that inbound flows are configured for all the attributes coming from the HR flat file account store.

3. Configure Outbound Flow Rules​

For each account store:

Active Directory (AD Domain)​

  1. Filter by the ADDomain account store.
  2. Set all attributes to Outbound to send data from the Person object to Active Directory.
    • The Email attribute will be set to inbound by default. Go ahead and change it to outbound since this lab does not have an authoritative Email system such as Exchange which would typically set the email value. Our email value in the lab comes from the HR flat file source.
  3. Do not set the LoginName flow rule, as it should generally not be modified via attribute flow.
  4. We don't use most of the ExtentionAttributes so you can skip most of the ExtentionAttributes except for ExtentionAttribute1 and 2 which are populated by HR.
  5. Save your changes.

Entra ID​

  1. Filter by the Entra ID account store.
  2. Repeat the process of setting attributes to Outbound to update Entra ID from the Person object.
  3. Set the Out of Office Status attribute to bi-directional to allow EmpowerID to read and update the OOF status from EntraID or EmpowerID.
  4. Exclude LoginName and unused Extension Attributes unless explicitly required.
  5. Save your changes.

Sales Management System​

  1. Filter by the Sales Management System account store.
  2. Repeat the process of setting attributes to Outbound to update Entra ID from the Person object.
  3. Save your changes.

4. Verify Attribute Flow Rules​

  1. Clear the filter to view all attribute flow rules.
  2. Confirm that all necessary attributes are configured as Inbound, Outbound, or Bidirectional based on the synchronization schema.
  3. Ensure rules align with the defined authoritative sources and update requirements.

Notes​

  • Attribute flow rules enable synchronization across systems and ensure data consistency.
  • Review each attribute’s flow direction to avoid overwriting critical data.
  • Consult your instructor or EmpowerID documentation for clarification on specific attributes or configurations.

Completion​

Once all attribute flow rules are configured and verified, the synchronization schema is complete. Proceed to the next lab to explore further EmpowerID features and integrations.

Video Walk-thru​

View a video walk-thru of this lab exercise.