Hello SailPoint Community,
I am looking for the most efficient way to automate the disabling of users in NERM exactly when their End Date is reached.
Currently, we have the account_end_date populated on our Non-Employee profiles, but I want to ensure that as soon as that date hits, the user status transitions to “Disabled” or “Inactive” without manual intervention.
Thank you in advance.
You will need to have an automated workflow for this which will check for the end date and have Status Change action in workflow to update the status.
Think your particular challenge is the keyword of “exactly”…meaning on the dot, 00:00 (challenge 1) of the timezone (challenge 2) of the non-employee’s profile?
Automated workflows have this timing limitation:
“The start time is dependent on the time zone in which the tenant is hosted and cannot be changed”
#SomeoneElsesComputer
As Terry pointed out - NERM automated workflows run once on a set schedule. So, generally, a user may still have access for some hours on the day of their termination date.
If you want the user to be terminated at exactly 00:00 on the termination date, you may be able to configure an ISC workflow to do so