I am trying to create a transform that sets the deletion date of an identity 60 days in advance, but I can’t use the HR source as sometimes they back date users which could cause users to delete sooner than the 60 days so I am using the exact moment that SailPoint knows Active Directory is disabled …

Detect Account is Disabled in Transform

sharvari (Sharvari Bharatiya) June 13, 2023, 4:04pm 2

You can use the IIQDisabled flag or accountFlags Flag in your transform to check if AD account is enabled/disabled.

Please refer this older post for additional information on using these attributes : Lifecycle Transform issue - #4 by chirag_patel

2 Likes

Topic		Replies	Views
Manage Account - Delete Operation ISC Discussion and Questions workflows	5	1790	July 19, 2023
Delete Active Directory Accounts after 30 days ISC Discussion and Questions identity-security-cloud	2	521	February 9, 2024
Transform Error ISC Discussion and Questions identity-security-cloud	4	843	July 19, 2023
Error when removing AD accounts wth child objects - 6003 (CANT_ON_NON_LEAF) ISC Discussion and Questions identity-security-cloud , sources	6	1161	July 19, 2023
IDN - Timing of the "Account Disable" event ISC Discussion and Questions identity-security-cloud	3	129	March 23, 2024