Users with Identity State : Inactive (Long term) were able to add as Reviewer in Certification campaigns

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello Team,

Post setting lifecyclestate as INACTIVE,
Users with Identity State : Inactive (Long term) were able to add as Reviewer in Certification campaigns.

Is this expected behaviour, then how we can exclude Inactive users as reviewers in campaigns?

Please provide some insights on this, will be helpful…!

Thanks,
Sakthikumar Ganesan

2

Hi Sakthikumar,

Unfortunately, inactive (long term) identities are still included in picklists for certifications. They have only been removed from the request center picklist as of now. SailPoint has indicated that identity state functionality will be coming to certifications, but I do not have a timeline on that.

Here’s the link to the announcement of identity states that includes more details:

Thanks!

Liam

2 Likes
3

Hi @sganesan ,
As @liamkokeeffe said, identities are still included in picklists for certifications .

The issue can be addressed through strategic changes:

  1. Ensure that identities are not assigned to inactive managers. This will prevent them from appearing as reviewers during certification processes.

A workflow can be implemented to identify all inactive managers and generate a report for HR. This report can then be used to reassign identities to either a new manager or the manager’s supervisor.

Additionally, it is advisable to implement ownership management. For further details, please refer to the following resource: Reassign Object Owners Using IdentityNow Workflows.

2 Likes
4

Thanks for the response

1 Like
5

@sganesan

Use campaign filter to exclude inactive identities from certification campaign

Thanks

2 Likes
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.