Account deletion was skipped for Salesforce because the threshold of 64 was exceeded

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hey all,
Our Salesforce source aggregation is showing the following message “Account deletion was skipped for Salesforce because the threshold of 64 was exceeded.”
Is there a way to get the logs that shows those identities that should be deleted from the source? Can I query the search API to get this kind of info?
Greenshot 2023-06-27 14.29.43

Thanks.

2

Hi @khalilgahbiche can you please let me know on what logic are you trying to delete identities on Salesforce ?

Assuming that you are deleting identities that are inactive in IDN

@accounts(source.name:“Salesforce”) AND attributes.cloudLifecycleState:“inactive”

3

This message is a generic Warning which indicates that source aggregation is trying to delete more accounts than the Delete Threshold setup on source. These accounts are being deleted from IDN because they don’t exist in Salesforce anymore. Post aggregation they will be deleted automatically no additional processing is required.

The search may not give you exact results on this as IDN doesn’t know which accounts are being deleted from the Salesforce system until it runs an aggregation.

To get that list -

  • From the accounts tab you can click on CSV and get an extract of existing Salesforce accounts.
  • Then update the delete threshold to a higher value so your Salesforce aggregation is success.
  • Export another list of accounts after this aggregation
  • Use Excel tools to compare both files and get the list of which accounts were deleted.
4

@sharvari , thank you for your reply.
I thought this warning refers to the fact that, due to one or many roles updates, IdentityNow will remove accounts from Salesforce, but when I read your comment, I understand that it’s the opposite, i.e the accounts have already been removed from Salesforce, and IdentityNow will just update its identities by removing their Salesforce accounts link, and if this threshold is exceed, then the link will always exist.
Do you confirm my understanding?
Thanks.

5

Hi @rajeshs ,
Thank you for your reply.
I’m not trying to delete anything on Salesforce, for me, it’s IdentityNow who’s trying to delete Salesforce accounts, may be due to one or more automatic roles updates. But, after reading @sharvari’s comment below, I understand that it’s the opposite.

6

Hi @khalilgahbiche Your understanding is correct

7

Yes, the accounts will continue to show in IDN. The Delete Threshold is a safe guard to prevent deleting/removing bulk accounts in error. To keep the systems in sync though, it is recommended you increase the delete threshold temporarily and allow IDN to remove the account on aggregation since it’s already removed from Salesforce. Once done, you can revert the threshold to 10%.

If you have a requirement to retain those accounts anyway, you can check the Disable Account Deletion box on the Aggregation page.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.