Disabled AD Account gets Unlinked in IDN after Full AD Aggregation

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

Below is the issue we are facing currently.

When identity is aggregated from auth source, created AD accounts through RBAC process.
When User is terminated from HR, we are disabling AD account and moving account to Disabled OU. After this when we run full AD Account aggregation, AD account gets unliked from identity. But if we run AD full aggregation again, then it’s get relinked to the identity. We have only one domain controller.

I have noticed that when account is disabled, role and entitlement gets removed from the identity and also if run single account aggregation we don’t see the issue.

Any thoughts on the issue.

Thanks,
Rajesh

2

Hey @Rajesh_Thota1 Is it the same query which you have posted few hours back?
AD Account gets Unliked from identity after AD full aggregation - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.