I have done the below
-
Created a transform to set the lifecyclestate to be “Inactive” for an identity when an Active Directory account is made to be disabled natively in the target.
-
Configured “Inactive” lifecycle state under the Provisioning Tab in Identity Profile to disable the Active Directory account.
The lifecyclestate is set to “Inactive” when I make the AD account disabled in the target which is the expectation.
I updated the same Active Directory account Enabled in the target and aggregated it. Even now the lifecycle state in the identity is shown as “Inactive”. My expectation is after running the Identity Refresh the AD account should again be disabled in the target since I have configured in the Identity Profile’s Provisioning option to disable to account