is it possible to get the status of an ad account from a identity. So basically if the ad account is disabled or not?
Yes, there are a couple of easy ways to get the status of an AD account for an identity in a SailPoint ISC workflow:
- Use the HTTP Request Action
- You can make an API call to SailPoint to retrieve the AD account details for the identity.
- From the response, check the
disabled
attribute (or equivalent) to determine the account status. - This method gives you flexibility if you need to handle additional logic.
- Documentation: Actions - SailPoint Identity Services
- Use the Get Accounts Action
- This built-in action lets you fetch accounts from a source like AD.
- The response will include account attributes such as
disabled
. - It’s a simpler option if you only need to check account status.
- Documentation: Actions - SailPoint Identity Services
1 Like
Thank you, is it also possible to get the event when the account is disabled .