Hey Team, I want to LOCK the SAP account once the account is in disable state is there any attribute i need to set in provisioning policy for that ?

Hi @Rakesh_Singh_1234 , May I know which connector you are using. For SAP Direct connector it doesn’t support lock account. [image] Also I have found below post please check if its meet your requirement. [image] Account attribute to disable for SAP Direct Connector ISC D…

When the user account is set to “Disable”, account is set administrative locked in SAP. This is already part of the direct connector behaviour, provisioning policy configuration is not required.

still not working . once SAP is disable it is still not locked

are you sure it doesnt support lock account ? then which SAP app support lock account?

Could be permissions related. Check if the SAP system id having the right permissions.

[image] Rakesh Singh: LOCK the SAP account once the account is in disable state is there any attribute i need to set in provisioning policy for that ? @Rakesh_Singh_1234 this is defined feature .Please check the setting at SAP end since this works at my end currently

Hi @Rakesh_Singh_1234 , Check your provisioning plan as UFLAG should be handled for different values. In your case you need to set UFLG to 64: Locked locally by an administrator. Configure this for Disable operation in your source

Hi @Rakesh_Singh_1234 In many SAP setups, “Disable” and “Lock” are not always the same operation at the system level. Even though ISC supports disable operations, the actual behavior depends on how the SAP connector maps it So instead of relying only on the disable state, you might want to check h…

I want to LOCK the SAP account once the account is in disable state?

Identity Security Cloud (ISC) ISC Discussion and Questions

suraj_gorle (Suraj Gorle) April 1, 2026, 7:22am 2

Hi @Rakesh_Singh_1234 ,

May I know which connector you are using. For SAP Direct connector it doesn’t support lock account.

Also I have found below post please check if its meet your requirement.

Thank you.

Topic		Replies	Views
Account attribute to disable for SAP Direct Connector ISC Discussion and Questions identity-security-cloud , connectors	7	319	October 5, 2024
SAP GRC - Access Management Integration mode - Identity attribute inactive = true then disable all SAP GRC Systems IIQ Discussion and Questions identityiq	2	132	August 6, 2024
Enable operation is not supported for self service for SAP - Direct IIQ Discussion and Questions identityiq	4	108	September 21, 2024
Disable Scenario Issue ISC Discussion and Questions workflows , identity-security-cloud	5	50	August 18, 2025
Create User Account with Password Deactivated in SAP connector ISC Discussion and Questions identity-security-cloud , provisioning	2	329	June 2, 2024

I want to LOCK the SAP account once the account is in disable state?

Related topics