Disable Scenario Issue

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Team,

I have a scenario whether there are two separate source “SAP ECC” and “SAP FG”.

The use case is when the account attribute in ariba known as dataOk is turned to N in that case we need to disable the account in FG.

How can this scenario be acheived?

2

Hi @Deepanshu07 Correct me if my understanding is right. Your requirement is that whenever the dataOk attribute on an account in SAP ECC (Ariba) changes to ‘N’, the corresponding account in SAP FG should be disabled automatically? If it is yes we can achive this via workflow.

3

Yes That is exactly the use case.

I have doubts over two things.
What can be the trigger and what is the api to trigger disable account for the user?

4

Hi @Deepanshu07 ,

As @rajeshs pointed it out, I would do this via a workflow.

If you have that ariba attribute value on an identity attribute then its: Identity attribute change trigger, Triggers - SailPoint Identity Services

else its Native change account update: Triggers - SailPoint Identity Services

To disable-account, you could try this: disable-account | SailPoint Developer Community

Please test it out in postman before you take it into the workflow.

5

Okay. This is how you can achieve this.

  1. Create an Identity attribute and map the dataOk value from the SAP ECC.
  2. Create a workflow with identity attribute change as the trigger. So when the dataOk is changed to N it should be triggered
  3. In the workflow get the identity and the corresponding SAP FG account in this case. If the user has the account use the Manage Account action to disable the account
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.