Removing attributes before linking users

[kurtfi]

I’ve managed to successfully link accounts using a rule. However the response from the SAML provider contains sensitive information which I do not wish to store in the linked identities. It seems that the command delete user.sensitive_field does not remove the attribute before it is converted into the identities array.

Any help would be much appreciated.

[dan.woda]

Hi @kurtfi,

Welcome to the Community!

Is the field you are updating a metadata field? If this is the case, you need to update the stored user, not just the user object in rules. Changing the user in rules doesn’t have an effect on the actual stored user profile.

Let me know,
Dan

[kurtfi]

Hi Dan, thanks for replying!

I actually solved the issue by updating the connection’s properties beforehand:

const result = await requestPromise({
          ...options,
          uri: `${baseUrl}/connections/${connection.id}`,
          method: 'PATCH',
          body: {
            options: {
              ...connection.options,
              non_persistent_attrs: sensitiveUserFields
            }
          }
        });

Hope this helps someone else.

BR,
Kurt

[dan.woda]

Thanks for the update!