Account deactivation from Google should disable downstream app accounts

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We have a use case where all the vendors are getting onboarded from CSV file(Delimited Source). Once identity is coming into Sailpoint , Account is getting created on Google Workspace.

The requirement is once the Google Workspace account is deactivated/disabled) it should disable all the downstream application accounts the user is part of.

2

Create a workflow.

  1. Trigger on Google account disablements.
  2. Use the Get Accounts action to get a list of all accounts for the Identity.
  3. Setup a Loop to go through the accounts. Use the Manage Account action to disable each account.

In the Loop you could do some checking of Source Names, and exclude certain sources if need be.

Otherwise you could do account disablements via the Identity Profile lifecycle states (LCS). Maybe have the Identity LCS be set based on the Google account status.