Delete Accounts on All Sources

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We have a Lifecycle State called ‘Sunset’ for when an Identity is terminated. This will remove all access and disable all accounts except a few selected sources.

We also have a ‘Terminated’ Lifecycle State that Identities fall into 30 days post ‘Sunset’. For this we want to Delete all accounts as discussed here - New Capability: Delete Accounts on Termination via Lifecycle Management

We have Identity State on this Lifecycle set to ‘Inactive (long-term)’ -

image
image466×164 3.88 KB

However, the option to choose Delete for All Sources is still not available -

image
image678×128 3.85 KB

Can someone provide some guidance for what could be missing?

Thanks!

2

If I recall correctly, this will only show up if all sources support the delete operation. You may have some sources that only support enable / disable. Example, the delimited file connector doesn’t support delete operations.

2 Likes
3

Does anybody that has this functionality working know if there is an option, once you are able to click on ‘All Sources’ that lets you exclude sources that don’t support delete. Similar to how the Disable option works -

image
image568×370 8.23 KB

Also, anyone that has the Delete from All Sources setup - do you also have any Sources in your system that don’t support Delete (Like delimmited mentioned by @ts_fpatterson)

Thanks!

4

Hello @chrisk ,

As per the documentation, “All sources“ option is not enabled currently. We cannot have this enabled and have it work like Disable Accounts.

image
image870×318 44.6 KB

You can find the sources that currently supports delete operation here
Identity Security Cloud Connectors - Compass

image
image1615×525 66.8 KB

Other option is to use list-sources | SailPoint Developer Community API where you can find “delete” string in features array which says that source supports delete operation

List All Sources Endpoint
List All Sources Endpoint904×704 55.3 KB

2 Likes
5

I was facing the same issue and I just added the “DELETE” statement to the “features” field on the Source. The Source (which was a SQL Loader type) then showed up as a Source that I could pick for deletion on the LCS. I haven’t tested this yet, but wouldn’t it work to just add the “DELETE” value to each Source and then check the “All Sources” box?