SailPoint IDN Account Status Not Change

Hi Experts,

Below screenshot showing accounts that are owned by this identity. I have updated 1 of the records from Orange HRMS to inactive, we can see the status of the AD account is updated to “disabled” and colored in grey and it is expected to be. But Orange HRMS’s is remain “Enable” and colored in green even it is in inactive status.

Would like to know why this is not updated for source application and way to fix this.

Hi Bernard,
It’s a tricky thing actualy in IDN. You need to set the attribute IIQDisabled to true if you want to see this account as disabled.

There are 2 ways how you can do that:

  1. Recommended - create build map rule to set this attribute during aggregation but as it’s cloud rule it’s not that simple
  2. Return from your JDBC query IIQDisabled attribute with either true or false

Both solutions will work similarly.

Hi Kamil,

Thanks for your clarification, that is very helpful idea. If the HRMS source is not using JDBC connector such as SAP, do the method for SAP same as well?

Also regarding option 2, technically how can we achieve this?

So I believe for OrangeHRM you can rely on the emp_status field - it contains ID reference to particular job status like active, inactive etc. If into the select statement instead of field name you put something like IF(emp_status = 2,true,false) as IIQDisabled it will just return true whenever employee will have emp_status equal 2. This syntax of course works only in MySQL as that’s where I was testing that.

You will get something like that
image

and since field is called IIQDisabled you can just use it directly in the schema.

Regarding second question - where you don’t have access to the aggregation query - the only solution you have is to use BuildMap rule for that.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.