How to get application accounts list and enable them for a user?

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

8.4

I have a requirement where I need to get all the application accounts of a user and enable them if they are disabled. Need to perform this operation in our rehire workflow

2

Hi @schaudhury,

the reinstate workflow already reactivates the disabled accounts of all applications where IIQDisable is managed by SP(AD, SAP ecc..).
image

For other type of applications like JDBC and webservice you can add onther step in this workflow where you write a script or launch a rule. In this script/rule you can search all the account of the current identity and you can reactivate the account and build a plan.

In every case is better manage IIQDisable if the connector dont manage it. For JDBC use the single operation rule(instead of global rule) and for webservice configure an Enable operation(and dont use only the update)

3

Hi @schaudhury,

You can enhance your rehire workflow by incorporating an additional step to enable the account. Integrate the enable logic within this business process. Refer to the logic provided below to enable the user account. Ensure that the enable provisioning policy is included in your application definition. For Active Directory (AD) applications, you will need to implement a logic to move the organizational unit (OU) from “disabled” to “AC_NewParent”.

       import sailpoint.object.*;
                        import sailpoint.api.IdentityService;
					    import sailpoint.object.ProvisioningPlan.AccountRequest;
                        import sailpoint.object.ProvisioningPlan.Operation
						ProvisioningPlan plan = new ProvisioningPlan();
						
						Identity identity = context.getObjectByName(Identity.class,identityName);
						plan.setIdentity(identity);                 
                        List lstLink = identity.getLinks();
	                    if(null != lstLink){
                    
                           for (Link link : lstLink) {
						   if(null != link && !link.isDisabled()){
						   AccountRequest accReq = new AccountRequest();
						   accReq.setOperation();
						   accReq.setApplication(link.getApplicationName());
						   accReq.setNativeIdentity(link.getNativeIdentity());
						   plan.add(accReq);

	                		} 
							}
							}
4

@enistriminsait Cant use the reinstate lifecycle event as we need to create different workflow for different type of users.

5

you can copy it and change the name to maintain the same bahavior

6

Hi @schaudhury,

Invoke the buildEventPlan method within your workflow step and set the operation (op) to “disable.” This will generate a plan to disable all links associated with the identity.

Regards,
Arun