Disable just Active Directory Account

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi guys,

Could you help me in this doubt?
I only need to block the AD account when the user goes on vacation, is it possible to do this process in the workflow, if so, how can this process be done?

Thanks in advance for the help.

2

Yes, you can do this using workflows.

  • You can use the Identity Attributes Changed trigger to identify a person going on vacation.
  • Use Wait action in the workflow until the vacation start date
  • Use Manage Accounts action to trigger a disable on the AD source account of the user

If you don’t want to use workflows, you can introduce a new “On Vacation” lifecycle status in your identity profile. When user switches to this LCS you can configure the LCS to disable the AD account.

5 Likes
3

Hi Sharvani,
I tried to do this process using workflow, but it disabled all AD accounts from the source, do you have an example of this process for just the identity that is going on vacation?

Thanks in advance for your help.

4

I’m curious, why you don’t have a Lifecycle state for vacation, similar to leave of absence, or other lifecycle states?

I would assume you would want to handle this in a transform and an Identity Profile.

1 Like
5

I second this response… in my opinion LCS would be the simplest way to achieve this

2 Likes
6

Can you share the screenshot of your workflow on builder including the “Select Accounts” configuration of “Manage Accounts” action

1 Like
7

Can you post the screenshot of the Manage Accounts step from your workflow?

1 Like
8

Thank you very much guys, we managed to solve this problem, we used the following code in the process of blocking the Active directory account: $.getAccounts.accounts[?(@.sourceId == ‘Acitive DirectoryID1’ || @.sourceId == 'Acitive DirectoryID2 ')].id

with that he blocks only AD accounts. We are using this process because we need to validate if the user who is leaving on vacation is a manager, if he is a manager we cannot block the accounts, that’s why we use the workflow.

Thanks so much for everyone’s help.

1 Like
9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.