DocuSign Account Closing

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Everyone,

We have integrated DocuSign source using IdentityNow OOTB connector i.e. DocuSign eSignature however, our requirement is to close the account whenever user life cycle status is inactive but in OOTB connector there is no option to disable the account.

SailPoint support team suggested us to go with before provisioning rule to close the account.

Any reference for rule if any one implemented for DocuSign account closing or inputs would be helpful.

Thanks in advance !

2

From the connector documentation I see that disable account is possible. Were you looking to close the account instead of just a disable?

If so, I would assume your Before Provisioning Rule might be something simple as below:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="Example Rule" type="BeforeProvisioning">
  <Description>Before Provisioning Rule which changes disables to closed</Description>
  <Source><![CDATA[
import sailpoint.object.*;
import sailpoint.object.ProvisioningPlan.AccountRequest;
import sailpoint.object.ProvisioningPlan.AccountRequest.Operation;
import sailpoint.object.ProvisioningPlan.AttributeRequest;
import sailpoint.object.ProvisioningPlan;
import sailpoint.object.ProvisioningPlan.Operation;

for ( AccountRequest accountRequest : plan.getAccountRequests() ) {
  if ( accountRequest.getOp().equals( ProvisioningPlan.ObjectOperation.Disable ) ) {
    accountRequest.setOp( ProvisioningPlan.ObjectOperation.Close);
  }
}

  ]]></Source>
</Rule>

Once this rule is deployed by Sailpoint, you can map it to the DocuSign source and test it out.

3

Hi @sharvari,

We have referred DocuSign eSignature connector document and it says it only supports creation and updating. Supported Features

However our requirement is to disable the account, in SailPoint it will consider account as closed if the userStatus attribute is changed to Closed or Disabled Account Aggregation Status

SailPoint support team suggested us to write a BeforeProvisioning Rule with delete operation for that we are trying to trigger an attribute sync and changing modify operation to delete operation any reference for the same will be helpful.

Thanks in advance !

4

The rule I posted above is for the same purpose, it can replace your Disable action to a Delete. Modify the snippet to set Delete op when op is Disable.

for ( AccountRequest accountRequest : plan.getAccountRequests() ) {
  if ( accountRequest.getOp().equals( ProvisioningPlan.ObjectOperation.Disable ) ) {
    accountRequest.setOp( ProvisioningPlan.ObjectOperation.Delete);
  }
5

Thank you for quick help @sharvari, I will try this.
Regards.

6

This will work only if the connector supports Disable event right? But DocuSign does not support enable/disable event. So we cannot trigger that to write a before operation rule. Am i right?

7

Hi @hafeez_rahman_fb,

We can make use of attribute Sync for userStatus attribute with that we can check modify operation and change it to delete operation.

Thank you,
Aditya Veldi.

2 Likes
8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.