Hi Guys,
I am using Workday as the authoritative source connector. When aggregating prehire users, their Workday account are disabled in ISC, even though all other flags (such as Active, Employee_status) are coming in as active.
Can you please advise on possible reasons why prehire users are in Disabled state in ISC and how to make them active?
This behavior typically occurs because Workday prehire users lack a hire date or have a future hire date, which SailPoint ISC interprets as not yet active. Even if employee_status and active flags appear valid, ISC uses the hire date field (often worker.startDate) as a critical condition for enabling the account.
To fix this, ensure:
The hire/start date is present and not in the future.
The identity profile’s “Identity is Active” criteria includes logic to handle prehires appropriately.
You can also adjust the provisioning policy or identity lifecycle policy if you want prehires to be considered active before their start date.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.