Can we recertify just accounts from a source?

[manoj_badhri_lseg (Manojkumaur Badhrinarayanan)]

In IDN can we have a certification campaign for reviewing just the accounts and not the entitlements associated with them?

[brad_grutsch]

No, not to my knowledge. We have worked around this in the past by designating a special entitlement as the ‘account’ entitlement that when revoked should disable the account.

Then, we write a beforeProvisioning rule that looks for operations that remove that entitlement and then change the operation to a Disable when that occurs.

[justinrhaines (Justin Haines)]

I’ve done it the same way…