ISC - Workday - Leaver Workflow configuration for Rescinded Users

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Please consider addressing the following when creating your topic:

Hello,

We have a Workday Connector where currently we are not aggregating rescinded past or future hire users.

But We are getting users from Workday in prehire state first and their AD accounts get created but after a day or two they are rescinded. Due to this it is removing the identity from ISC and no leaver is getting triggered.

Has anyone configured rescinded feature of Workday in SailPoint ISC.

2 Likes
2

We just did this, you need to enable aggregating the rescinded users and add the related attributes (IS_RESCINDED, RESCINDED_DATE, and RESCINDED_DESCRIPTION). You’ll have to do some testing to see how it behaves, for example this article describes combining the attribute with other ones (ACTIVE or FUTURE_DATE / FUTURE_ACTION) but we found we didn’t need that. In our case, we were able to just set the LCS logic to if IS_RESCINDED is true, to put the identity in a terminated state which kicks off the leaver process.

1 Like
3

Hi @utkirjonkamiljanov ,

This document will help to handle Resinded users termination process Rescinded and Corrected User Records

1 Like
4

Thanks @vkashat Let me try this.

5

Please follow the below Steps:

  1. Add the Attribute Is_Rescinded in the Workday Schema. Add the XPath mapping in the configuration.
  2. Enable the Future rescinded Aggregation
  3. Add the logic to determine the cloudLifecycleState.
  4. Disable the accounts based on the cloudLifecyslceState value.

Thanks

3 Likes
6

Thanks ! Let me try this.

2 Likes