Can we recertify just accounts from a source?

In IDN can we have a certification campaign for reviewing just the accounts and not the entitlements associated with them?

No, not to my knowledge. We have worked around this in the past by designating a special entitlement as the ‘account’ entitlement that when revoked should disable the account.

Then, we write a beforeProvisioning rule that looks for operations that remove that entitlement and then change the operation to a Disable when that occurs.


I’ve done it the same way…