We are integrating Web Service Connector and currently we want to aggregate only the Enabled accounts and we do not want to aggregate Disabled accounts. As we are using API’s here is there any filter for API URL through which I can achieve this?
Using the documentation Carl provided, you would probably want to construct a filter on your AD source using either userAccountControl or ms-DS-User-Account-Disabled. userAccountControl is a bit tricky to build an LDAP filter for, here is a site that explains it a bit more: LDAP Filtering
That site includes an example of an LDAP filter that might fit your usecase.
(!(userAccountControl:1.2.840.113556.1.4.803:=2))
This will exclude all accounts that have the disabled flag set on their userAccountControl value.
I have tried the various values like :
“value”: “(status == "A")”
“value”: “((active == true) && (status.containsIgnoreCase("A")))”
“value”: “(active == true)”
“value”: “active == false”
They are not working as expected for Account aggregation.
We are using this for Webservice connector as the expected results should be to read only the active:true and status:A in the account schema. Currently we are able to see the disabled accounts also after the aggregation.
Can you please help me here as I am not able to aggregate only the enabled accounts.
If I understand correctly, the value that matches the filterString is not aggregated and the property must be part of the account schema.
Perhaps the below JSON or similar could work: -