Identity Lifecycle Use Cases

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Lifecycle State Transition and Provisioning Rules:

We have a scenario where a user’s AD account is:

  • Initially disabled in the Pre-Hire lifecycle state.
  • Later transitions to directly Inactive, which is also configured to disable the AD account.

Clarifications Requested :

  • When a user’s lifecycle state changes from Pre-Hire to Inactive (In both lifecycle provisioning tab we have configured disabling the AD account), will SailPoint invoke a before provisioning rule again?
  • We have few attributes to update when user became inactive so it’s necessary for us to trigger before provisioning rule when it became inactive from prehire state.
2

Hi @dipali_ankush_dhonde,

If your AD account is already in a disabled status and the new lifecycle state is configured to disable the AD account, ISC will not trigger any provisioning event, since there is no activity to be performed. In that case, the before provisioning rule will not be invoked.

In that case, you may want to make use of an attribute sync to trigger a provisioning event and then perform your required actions through a before provisioning rule.