Hey Team,
I want to LOCK the SAP account once the account is in disable state is there any attribute i need to set in provisioning policy for that ?
Hi @Rakesh_Singh_1234 ,
May I know which connector you are using. For SAP Direct connector it doesn’t support lock account.
Also I have found below post please check if its meet your requirement.
Thank you.
When the user account is set to “Disable”, account is set administrative locked in SAP. This is already part of the direct connector behaviour, provisioning policy configuration is not required.
still not working . once SAP is disable it is still not locked
are you sure it doesnt support lock account ? then which SAP app support lock account?
Could be permissions related. Check if the SAP system id having the right permissions.
@Rakesh_Singh_1234 this is defined feature .Please check the setting at SAP end since this works at my end currently
Hi @Rakesh_Singh_1234 ,
Check your provisioning plan as UFLAG should be handled for different values. In your case you need to set UFLG to 64: Locked locally by an administrator.
Configure this for Disable operation in your source
1 Like
In many SAP setups, “Disable” and “Lock” are not always the same operation at the system level. Even though ISC supports disable operations, the actual behavior depends on how the SAP connector maps it
So instead of relying only on the disable state, you might want to check how your SAP system handles account lock internally.
If the requirement is strict “lock on disable,” you could also handle this in a Before Provisioning Rule, where:
Disable event → trigger a modify operation
Explicitly set the SAP field responsible for logon restriction
From my experience, this usually needs alignment with the SAP team, since the exact attribute that enforces “lock” varies by implementation.