Remove the entitlements assigned via entitlements request, when a user gets disabled for SAP direct connector

We are trying implementing the SAP provisioning with IdentityNow. SAP account is getting created as request based via entitlement request. When the user terminated we would like to remove all the assigned entitlements. Is anyone worked on this. Is this needs to be implemented via before provisioning rule . Any suggestion will help.

Hi Rakesh,

you should be performing this action from before provision rule to avoid sticky entitlements issue when Identity refresh happens. Refer to the post

Hi Suresh, can you please share any reference of before provisioning rule for this specific usecase.

Use this Workflow to remove ALL leavers’ standing access - IdentityNow (IDN) / Show and Tell - SailPoint Developer Community Forum

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.