How to terminate of AD users in the correct timezone

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,
we have users in multiple countries and time zones. So currently we use PS script to disable these users.
The source is Oracle HCM.

We are worried that it will screw up terminating users. Is there a way to terminate in their time zone?

2

Hi Asela,

Termination of identities is typically done via lifecycle states, which is an out-of-the-box feature in IDN. Lifecycle states are usually set via transforms on the identity profile. The transform will use data from your authoritative source to determine what lifecycle to place an identity in. See this Compass post for an example of someone wanting to know how to create a transform for different lifecycle states. You can read more about lifecycle states here.

1 Like
3

Hi Colin,

Thanks for your information. The issue is how to offset their local time. We have users in US, UK ,NZ China, and AUS

HR Source Terminated Users in GMT ( Ex: LWD 17/06/2022 00:00 GMT)
We are disabling their account after 26hr. But we want to know how to disabled in last day of their local time.

US user 17/06/2022 - Pacifice time 6.00PM in AD
UK user 17/06/2022 -London time 6.00PM in AD

  "name": " Updated EndDate",
        "type": "dateFormat",
        "attributes": {
            "input": {
                "attributes": {
                    "expression": "+26h",
                    "input": {
                        "attributes": {
                            "input": {
                                "attributes": {
                                    "name": "endDate"
                                },
                                "type": "identityAttribute"
                            },
                            "inputFormat": "yyyy-MM-dd",
                            "outputFormat": "ISO8601"
                        },
                        "type": "dateFormat"
                    },
                    "roundUp": true
                },
                "type": "dateMath"
            },
            "inputFormat": "yyyy-MM-dd'T'HH:mm",
            "outputFormat": "ISO8601"
        },
        "internal": false
    }
4

Try using the lookup table transform to keep a map of user locations and the timezone offset. When calculating the end date, do a lookup in your table using the location attribute of the account to get the timezone offset. You can use the value of the timezone offset in your expression when calculating the end date in their local time.

1 Like
5

Thank you so much. Can you show me the code for US user?