Update of Email with added value when account goes inactive

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

When we have a user go inactive their email has to stay on the identity profile and added a X at the end of the email address, so it’s not used.

I have it working for active but in reverse the email is showing but nothing at the end as i have in my code. Still learning the velocity method and if i can get a 2nd eye on this i would be grateful. I see to figure it out later on but maybe someone can be quicker so i can close this out for the week.

{
“id”: “”,
“name”: “Non-employee email Transform”,
“type”: “static”,
“attributes”: {
“ignoreErrors”: “true”,
“value”: “#if($status==‘inactive’)email+X#{else}$email#end”,
“status”: {
“type”: “accountAttribute”,
“attributes”: {
“attributeName”: “userAccountControl”,
“sourceName”: “ACTIVE DIRECTORY NON-EMPLOYEE ACCOUNT SOURCE”
}
},
“email”: {
“type”: “accountAttribute”,
“attributes”: {
“attributeName”: “mail”,
“sourceName”: " ACTIVE DIRECTORY NON-EMPLOYEE ACCOUNT SOURCE"
}
}
},
“internal”: false
}

2

“value”: “#if($status==‘inactive’)email+‘X’#{else}$email#end”,

3

Add ‘’ arround your X

4

and also $email :

“value”: “#if($status==‘inactive’)$email+‘X’#{else}$email#end”,

5

Hi @VBsupport,

This works for me :

"value": "#if($status=='inactive')${email}X#{else}$email#end"

1 Like
6

I’m agree with @jesvin90

7

I added the updated value and the email stays for an inactive but is not appending the “X” after their name. I swear this system hates me this week

8

Hi @VBsupport,

userAccountControl value does not come as active/inactive

Check the below article for details. You will need to modify the transform accordingly.

9

So this is working for my manager. The UAC is being transformed into inactive or active on what ad has in that field which is 514 for disabled. Maybe i can reference the identity state instead directly

10

I changed the UAC to an identity attribute reference and mapped status.

{

"name": "Non-employee email Transform",
"type": "static",
"attributes": {
    "ignoreErrors": "true",
    "value": "#if($status=='inactive')$email X#{else}$email#end",
    "status": {
        "type": "identityAttribute",
        "attributes": {
            "name": "status"
        }
    },
    "email": {
        "type": "accountAttribute",
        "attributes": {
            "attributeName": "mail",
            "sourceName": "ACTIVE DIRECTORY NON-EMPLOYEE ACCOUNT SOURCE"
        }
    }
},
"internal": false

}

Hope it help anyone out there and thanks everyone for the 2nd and 3rd eyes

11

Hi @VBsupport,

image
image857×352 36.5 KB

You should consider using Identity attribute context as below :

12

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.