I haven’t had any success yet on generating a disabled account on creation when the account is a prehire. I try to set Enabled to false as a static value. I have tried to set a value using the before provisioning rule. I don’t see errors on the activity. We are doing a move operation at the same ti…

We were still having issues. used some logic like the below example. { "eventActions": [ { "Action": "UpdateAttribute", "Attribute": "carLicense", "Value…

Hi Fred, Have you created the LCS state for Prehire and added the AD source in Disable account ? We have the same use case and it is working fine using the above. Thanks Rakesh

Agree with @RAKGDS using Prehire LCS for this configurations works!

I guess it should work as the two above people mentioned but in addition I believe this should work (if you set this in the create account provisioning policy { "name": "IIQDisabled", "transform": { "type": "static", "attributes": { …

Hi Rakesh, Yes, we are using a Prehire LCS. It creates the account, and the Account Configuration is set to Disable Accounts. The Account Provisioning on AD is setting a static distinguishedName for placement. But then the before provisioning rule is also moving the account in case they are changi…

I’m still seeing issues with it being disabled with or without the before provisioning snippet above. We have I around 7 lifecycle states. The above snippet is the only one for prehire. Would logging on the agent help? Is this being handed off to the agent to handle and would we possibly see errors…

Hey @ts_fpatterson You said the Prehire lifecycle state is creating and disabling the account? Can you explain how this is done? If you are creating the account through the lifecycle state provisioning, it makes me thing you have an Access Profile being assigned to the Prehire lifecycle state that…

Hi Fred, Do the following and see if you aint seeing issue’s. 1.Have Lifecycle state of Prehire and add your AD source to get Disabled. 2. in your Create Account Provisioning policy add this for IIQDisabled attribute mark it as static and add the following code #if($identity.attributes.cloudLife…

AD Account Creation in a disabled state

Identity Security Cloud (ISC) ISC Discussion and Questions

ts_fpatterson (Fred Patterson) August 25, 2023, 9:27pm 9

this helped, thanks.

Working on setting up create disabled AD when in prehire LSC

Topic		Replies	Views
Create AD account in disable status during prehire ISC Discussion and Questions identity-security-cloud , provisioning	16	905	August 1, 2024
Working on setting up create disabled AD when in prehire LSC ISC Discussion and Questions identity-security-cloud , provisioning , identity-profiles , accounts , connectors	4	230	October 1, 2024
Move AD Account that's already disabled to different OU ISC Discussion and Questions	6	1636	March 30, 2023
Is it possible to create disabled AD accounts if the identity life cycle state is active? ISC Discussion and Questions identity-security-cloud , provisioning , connectors	6	246	December 11, 2024
Account not disabled after user moved in AD ISC Discussion and Questions identity-security-cloud	14	573	March 4, 2025

AD Account Creation in a disabled state

Related topics