How to ignore accounts during authoritative source aggregation if termination date is past 90 days?

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

We are currently using our HR system - ADP WorkforceNow - as our authoritative source in SailPoint ISC, this is connected via WebService connector. It’s come to my attention that our HR department will on occasion “unarchive” a handful of past employees that have a termination date of more than 90 days in the past and in some cases 10 years in the past. When these accounts are unarchived in WorkforceNow, it will trigger those accounts to be provisioned under our terminated LSC on the next aggregation. I’ve spoken to our HR department on this issue, and they are unable to edit the employee records before unarchiving. This will cause the old employees SailPoint identity to be assigned to their previous manager if one is listed in the aggregated HR record.

I’ve checked the ADP WorkforceNow API documentation and there are no filters that can be used to ignore any HR records with a terminationDate of +90 days past during the SailPoint daily aggregation. Can a before rule be created for this action to ignore those terminated accounts during the daily ADP WorkforceNow aggregation? If so, how can this be created to ignore accounts with a terminationDate of +90days ago?

image

2

Have you considered AfterOperations rule to remove any record that matches your filter criteria?

3

if you checkthis doc below. it has filters to get only certain records. you may have to work work with Workforcenow engineering/admin to see if there is filter you can build to check last 90 days on termination date /hr/v2/workers:

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.