How to do Enable/Disable operations in DocuSign?

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,

I have an requirement to onboard the application called DocuSign into ISC. I can see the DocuSign supported features in the below documentation:

But I’m not able to see the Disable/Enable features for this connector. Does it supports the account disable during leaver and account enable during rehire? Can anyone guide me through this process? Or any other way to achieve this?

Thanks.

2

Hello Sheela, I checked the documentation(supported features), and yes it looks like the DocuSign eSignature connector does not list Enable Account or Disable Account as supported provisioning operations. It supports Create, Update, and Delete Account.

You can try this:
For leaver, use the Delete Account operation through lifecycle state provisioning. On the Terminated/Archived lifecycle state, set the identity state to Inactive (long-term), then configure Delete Accounts → Specific sources → DocuSign. The Inactive (long-term) state is required, since ISC only allows lifecycle-based Delete Accounts in that state (lifecycle states). On the DocuSign side this closes the user’s membership and blocks access.

3

@punna0001 I have gone through this, i don’t want to delete the accounts, I want to disable the accounts on DocuSign side and keep them in SailPoint side as inactive.

4

@sheela01 I have recently onboarded the application and faced the same issue. Below is the solution to your case:

  1. I have used Service Standard Before Provisioning Rule for disable
  2. Use the required eventActions and operation for your case, like if the operation is disabled, you can change the operation to delete only when the LCS is inactive/terminated.
  3. Note: The delete operation will delete the account and disable it; during the next aggregation, the account will come into SailPoint in a disabled state.
"cloudServicesIDNSetup": {
            "eventConfigurations": [
                {
                    "eventActions": [
                        {
                            "Action": "ChangeOperation",
                            "Attribute": null,
                            "Value": "Delete"
                        }
                    ],
                    "Identity Attribute Triggers": [
                        {
                            "Attribute": "cloudLifecycleState",
                            "Value": "inactive",
                            "Operation": "eq"
                        }
                    ],
                    "Operation": "Disable"
                }
            ]
        },

LMK if this works.

5

Note: Also add DISABLE value under features in the source config either through VSCode or API.

image
image252×184 3.3 KB

For Enable, add the DocuSign source’s respective IDP, and it will take care of the rehire part.

6

@Santhakumar Thanks for the input, will try this and let you know. Since we already have this for AD will try to implement what you have suggested.