Authoritative source included in “All sources” when disabling accounts

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello,

When updating an identity lifecycle to one where all sources should be disabled (with some exceptions), I noticed that the authoritative source is added to the provisioning plan. It does not appear in the “Exclude sources” list.

image
image401×303 8.19 KB

Is there any way to change this behavior ?

Thanks.

2

Hello Fatima, can you doublecheck that the Authoritative source account tries to be disabled?

If you dont have the disabling provisioning plan, it shouldn’t be tried. Ichecked only once with a non-employee authoritative source.

Regards,

Pablo

3

Hello @pablonovoa

Thank you for your feedback.

Indeed, the authoritative source account is attempting to be disabled.

In my tests, this source is also a non-employee source.

Regards,

4

As a workaround, we can exclude the source via API: /v3/identity-profiles/$identityprofileId/lifecycle-states/$lcsId


[
  {
    "op": "replace",
    "path": "/accountActions",
    "value": [
      {
        "action": "DISABLE",
        "sourceIds": null,
        "excludeSourceIds": [
          "XXX",
          "YYY"
        ],
        "allSources": true
      }
    ]
  }
]