Remove the user access before disabling the user account in IdentityNow

[chandramohan27 (Chandra Mohan S)]

Hi Experts,

There is a more generic use case where I have to remove all the access items of the user before disabling the user account across sources. I thinking to achieve this in workflow.

Step 1: Trigger when LCS changes to Inactive.
Step 2: Get All Access Items for the Identity.
Step 3: Remove all the access using Loop Operator.
Step 4: Exit Loop
Step 5: Get the user’s all Source accounts.
Step 6: Disable the user account using loop Operator.

Kindly suggest if there is any better practice to achieve this.

[filip_johansson]

I would suggest you complete Step2-Step4 using a solution like this one instead.
Then any access would be removed using a certification and thus leave a better audit trail.

Other than that, it looks solid.