Event Trigger triggered for a deleted user

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Ambassadors,

I am facing an issue in the production.
We have one event trigger, whenever an AD account is created for the employees who have Employeetype as “A”, “B” and “C” it will trigger a ticket to Service desk plus.

But, the issue is we have deleted some users as part of pending/inactive worker cleanup for those users tickets got created in SDP which is not an expected behaviour.

I don’t have any way to check the user logs in ISC since the user got deleted. I checked the activity logs of that event trigger to confirm about the trigger i can see the logs of affected user.

Looking for anyone have faced the same issue or can provide suggestions for the issue behind it.

Thank you!
Dharani.

2

Hi @Dharani ,

Can you try to look up for those users in access history and validate if there are any recent changes on the identity attributes before the cleanup which in turn triggered this event?

Can you verify when these tickets are created? is this before user got deleted or after?

Thanks,
Vijay Maripi

3

Hi @VijayMaripi

Yes, I already verified the access history i observed the add entitlement logs before deletion and also on the day of deletion. but not able to see complete details.

These tickets triggered after deletion of users.

Thank you!