Account selection form

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

through manage user access when requester selecting AD entitlement if the user having multiple AD accounts then system will show up a account selection form to select which account the access should get provisioned. in this case we don’t want user select disabled AD account. what are possible ways to achieve this.

  1. is there any configuration like Role account selector rule.
  2. is it possible show account status on account selection form.
  3. is it possible to hide disabled accounts from account selection form.
2

Hi Venkat,

  1. No
  2. Out of the box - No, with the custom plugin - yes
  3. Same answer as point 2

Actualy there are 2 solutions which I belive are feasible.

  1. PolicyViolation - to prevent from selecting disabled accounts. User will still see them but like with SoD it will get PolicyViolation if he selects this account.
  2. Make use of entitlement roles (it’s very old type of roles, from 6.0 i believe. But simply speaking each AD group would be a separate role - and there you can use selector rules.
3

@kjakubiak - thank you for your response.