Hello, We have already used the official APIs with filters to retrieve a list of accounts from a specific system that have not logged in for more than 60 days. However, this approach currently works only with a PAT and manual execution. If we want to automate this on the customer’s platform withou…

@Dervish you can capture the field in SailPoint in identity attribute and can use a transform to calculate if the date is greater than 60 days using date compare transform . Based on this attribute then you can create a search report

I would try the below considering you already have a source configured in ISC and you want to automate the above from ISC. Get the lastLogon or whatever the account attribute you used to know about login date from your source. Create a flag identity attribute and populate the value via transfo…

It would be good to know the source. What use case are you implementing? Only a report?

On top of other friends’ suggestions I must add that the scheduled report receiver should have proper user level to be able to reach the report. For these type of report requests, you can call Search API and create custom reports outside of ISC.

Hi @Dervish , We built a source (Web Service connector) to easily identify the inactive accounts for XX days and used it to launch certification (instead of generating report). Our connector is configured with the following operations: Get Accounts Operation: API Search to list all the identitie…

Hi @ts_fpatterson The sources include GCP, Salesforce, SAP Basis, AD, Cato Networks, Azure AD (AAD), and Web Services. Since each source uses a different time format, the values must first be normalized and converted. The goal is to identify accounts that have not logged in for more than 60 days a…

Hi @suresh4iam , May I ask whether the approach you mentioned can only be applied to a single Source? In other words, if there are multiple different Sources, do we need to create one for each Source? For example, if we have 20 Sources, would that require creating 20 separate connectors?

Hi @bastienprulhiere , We have discussed with our team the possibility of consolidating this data into a Web Service Source. However, since each Source uses a different time format, time normalization and conversion would be required. In addition, the customer’s current certification process is no…

Hi @Dervish We have similar use case with the date format which is different between every sources so we added properties on source to manage this: “lastLogonConfig”: { “Groups Aggregation - APP XX Account”: { “durationInDays”: 90, “appName”: “APP XX”, “format”: “dd/MM/yyyy”, “attributeName”…

You need separate identity attributes for each source to get the date from each source. In case if you want to get the latest date among those sources, you can use transform to get the date from each source and compare between them to get the latest one.

What is the best way to regularly generate a report of system accounts that have not logged in for more than 60 days?

Identity Security Cloud (ISC) ISC Discussion and Questions

vguleria (Vikas Guleria) February 4, 2026, 1:10pm 12

Hi @Dervish

Please see this. This will help you identifying the users who have not logged into multiple target application. This approach can also handle the different types of date time format for each application.

The core idea here involves creating a new identity attribute and you can there store multiple applications where the user have not logged in.

I hope this works.

Regards
Vikas.

1 Like

Topic		Replies	Views
Developing Standard reports in Identitynow ISC Discussion and Questions	7	1677	July 19, 2023
Search for users not logged in during past 120 days ISC Discussion and Questions identity-security-cloud , search	5	1348	September 27, 2023
Is it possible to create campaign who have not logged into AD for the past 30 days? ISC Discussion and Questions identity-security-cloud	5	64	August 2, 2025
Automating the reports ISC Discussion and Questions identity-security-cloud	4	59	February 19, 2026
Report on Account Expiry date ISC Community Knowledge Base identity-security-cloud	1	110	March 14, 2026

What is the best way to regularly generate a report of system accounts that have not logged in for more than 60 days?

Related topics