AD AccountExpires Create Transform +1 day

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

We have to send the account expires date to the AD “Accountexpires” which it is doing however it is creating the next day instead of the date that is sent 1/1/2024 but is posting 1/2/2024 12:00:00 AM UTC instead. any ideas how to keep the dame date on the AD on what is being sent from IDN.

    {
        "name": "accountExpires",
        "transform": {
            "name": "Account_Expires_AD_Transform",
            "type": "dateFormat",
            "attributes": {
                "input": {
                    "attributes": {
                        "name": "serviceAccountExpirationDate"
                    },
                    "type": "identityAttribute"
                },
                "inputFormat": "MM/dd/yyyy",
                "outputFormat": "EPOCH_TIME_WIN32"
            }
        },
        "attributes": {},
        "isRequired": false,
        "type": "string",
        "isMultiValued": false
    }

image
image

2

This actually appears to be working correctly, from the outside perspective. If the worker’s contract ends on 6/31/24, their account shouldn’t expire at 12am on 6/31 because then they wouldn’t be able to work that day.

Is 6/31 the last day this person is working, or is 6/30 the last day they’re working?

3

Actually, I’ve just realized a bigger issue: there is no such thing as 6/31. June only has 30 days, so technically, June 31 would be July 1…

4

The Hour is appearing cause the IDN UI is conveting it to ISO816.

Remember that IDN is on GMT so any dates mare also going to be converted to GMT

5

Hi @VBsupport,

You may want to take a look at the below document on syncing the accountexpires attribute

We have converted AD source timezone to epoch and made the identity attribute in epoch format to fix the attribute sync issue with the accountexpires attribute.

6

Good call out on the date thing for June as well yest typically the end date should be the last day but i do not think business thinks it that way. let me do some more testing and read on this but please keep the ideas or testing comming

7

So i did the test on a new date change with VAILD dates and it look to stay at the same date as set and expire at midnight. WE are all good. I need this long weekend to come faster. :slight_smile: Thanks all

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.