Ignoring Identites from SAP HR source with a via end date

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello All,

The Setup

I am starting to troubleshoot a problem I have. We currently have multiple SAP HR authoritative sources that we utilize to build out our identities. For the cloudLifecycleState we use a transform to let us know the inactive state. One of these states is inactive30 which is everyone that has been inactive 30 days or more.

The Problem

The problem is that the company needs to store records of all employees that have been employees. This has flooded the environment with too many inactive identities to manage. Company has been around for a bit and there are about 5x more inactive than active

The Ask

is there a connector attribute that we can add to ignore any user that would fall into this (or a different) cloudLifecycleState, or have you had an approach of your own that you were able to solve a similar problem?

2
  1. I would suggest you to check the connector if there is any inbuilt filter
  2. If not, you can use filter string
3

you can use filter string IdentityNow Account Filtering during Account Aggregation - Compass
or you can ignore ootb sap hr connector rather u can use webservice connector and control with webservice rule.
If you have specific attribute in application and u can use with filter then it will ignore those accounts

4

Will the filterString work if the Lifecycle State is being determined by a transform? I guess this is more of an order of operations issue.