Disable Operation Failing in AD using beforeprovisioningrule

[Prasad_muchanapally]

Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Hello Team,

I am facing below error, while performing disable operation in Active directory.

UseCase:

if identities have same email address and using same Active Directory account.

If any identity gets inactive in ISC , so the rule check other identities are active or not , if any identity active, the rule must stop disabling account.

Issue:
We have implemented beforeprovisioning rule to perform disable account, when we test the case, encountering an below error.

[ts_fpatterson (Fred Patterson)]

Can you share the rule? Did this rule come from IIQ or modified from an IIQ based rule?

Has this rule worked in any other environment?

[markomanium (Marko Mladenovic)]

@Prasad_muchanapally is this identical issue as being discussed in Disable account getting failed using beforeprovisioning rule - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community ? Could you give it a look, as there are more details provided already.

[gogubapu (bapu gogu)]

Hi Prasad,

refer below post for your reference on the same error.

Disable account getting failed using beforeprovisioning rule

Facing Below error, while disabling account, we are using beforeprovisioning rule. UseCase: if identities have same email address and using same Active Directory account. If any identity gets inactive in ISC , so the rule check other identities are active or not , if any identity active, the rule must stop disabling account. RuleExecutionException (ruleName=MATEActiveDirectoryBeforeProvisioning): BSFException: The application script threw an exception: java.lang.ClassCastException: Cannot c…

[RAKRHEEM (Rakesh Bhati)]

@Prasad_muchanapally

I am facing below error, while performing disable operation in Active directory.

UseCase:

if identities have same email address and using same Active Directory account.

If any identity gets inactive in ISC , so the rule check other identities are active or not , if any identity active, the rule must stop disabling account.

Issue:
We have implemented beforeprovisioning rule to perform disable account, when we test the case, encountering an below error.

The issue is a ClassCastException caused by using sailpoint.object.Identity instead of sailpoint.rule.Identity in cloud rules. The sailpoint.rule.Identity class doesn’t have getAttribute() method—use getLifecycleState() directly:

for (sailpoint.rule.Identity idVal : identities) {
    String searchidnlifecycleState = idVal.getLifecycleState() != null 
        ? idVal.getLifecycleState() : "";
    if ("active".equalsIgnoreCase(searchidnlifecycleState)) {
        isAnyIdentityActive = true;
        break;
    }
}

This resolves the casting error when iterating over identities returned by findIdentitiesBySearchableIdentityAttribute().