Identitites have 2 different IDs and so it is creating 2 HRMs accounts, if idenitity attribute is "assignmentStatus" and its value is "Active Contingent Assignment" then the account should be diabled

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Identitites have 2 different IDs and so it is creating 2 HRMs accounts, if idenitity attribute is “assignmentStatus” and its value is “Active Contingent Assignment” then the account should be diabled
How can we achieve this? can we write a transform if that possible how can we do it?

2

Try a provisoning policy rule as :

import sailpoint.object.Identity;
    import sailpoint.object.ProvisioningPlan;
    import sailpoint.object.Application;

    Identity identity = (Identity) args.get("identity");
    String assignmentStatus = identity.getAttribute("assignmentStatus");

    if ("Active Contingent Assignment".equalsIgnoreCase(assignmentStatus)) {
        return "Disabled"; // or "Inactive", based on your connector
    }

    return "Enabled";
3

@Rahulsunnysechpoint
Are you trying to make the lifecycle state disable ? or want to disable any specific account

4

specific account disabled

5

account disabled for particular source

6

@Rahulsunnysechpoint then if i understand correctly you need to disable the account based on this attribute for that you can create a transform and update your lifecycle stat attribute to a state which will trigger disable task to your target application

7

In aggregation can we exclude these accounts not to get into ISC

8

In aggregation can we exclude these accounts not to get into ISC

9

Can i get a Transfrom to populate the New account values fron considering an account attribute and its value

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.