Task scheduling in a rule

[yaghzere (Youssef AGHZERE)]

Hello All,

Is it possible to schedule a task in a rule ?

Here is the situation : Once an identity becomes “inactive”, the SAP accounts will be disabled (using Provisioning in Identity Profile), but to avoid that the accounts will be reactivated again (in case of the account expiration date “User Valid To” in the future in SAP end), we overwrite the value with the value of “contract end date” in IdentityNow.

This two-actions process works perfectly, but the issue is that our connectors won’t be connected during weekends (for a particular reason). Thus, if an identity becomes “inactive” during weekend ( or the very beginning of the weekend (1 AM, etc…) ), its SAP accounts will not be disabled (which is normal), and the before Provisioning rule will not be able to overwrite the value of “User Valid To”.

My question is the following : Is it possible to schedule the “User Valid To” value overwriting 3 days after the rule execution using only code without using sleep() ? If sleep() is used, the rule will be executed for 3 days, will that cause performence issues ?

Thank you in advance,

[vguleria (Vikas Guleria)]

Hi @yaghzere

Welcome to the SailPoint community.

Just thinking out of the box, can you not create an additional identity attribute something like SAP end date and apply a transform here that when ever an identity become inactive and end date is in future, we restrict the end to today or 1 day before.

Then you can use this attribute for provisioning to SAP system and use the attribute sync. So when the connector is not working, ISC will throw an error that the operation failed for some reason but once the source is back, then during identity refresh and attribute sync will ensure that end date is always in the past for inactive users.

Can you please check if this approach helps ?

Thank You.
Regards
Vikas.