Which IIQ version are you inquiring about?
8.3
Please share any images or screenshots, if relevant.
Please share any other relevant files that may be required (for example, logs).
Nothing shows up
When you choose inactive as TRUE in advanced analytics page, it means you are looking for inactive identities. If no search is coming after clicking “Run Search“ , then it means no identity with inactive value is is present in your IIQ environment.
Hope it helps.
1 Like
Select True here to show inactive identities in your search results. Select False to include active identities in your search results
If there are no results when you search, that means you don’t have any identities meeting your search criteria
Linking docs for more info on searching in Advanced Analytics
1 Like
Inactive attribute is basically the identity status , if it is true, identity is disabled, and if if it is false, identity is active. Open any identity from debug, both active and inactive, and you can see the value in xml.
@sathish3004 Inactive is the OOTB attribute to store the identity status. But you can also create a new extended attribute to store the identity status. If it is not returning the disabled users, it means you are not actively using this attribute and identity mapping is not defined for inactive attribute.
Note: Found a fix? Help the community by marking the comment as solution. Feel free to react(
, 
, etc.) with an emoji to show your appreciation or message me directly if your problem requires a deeper dive.
“inactive” in OOTB IIQ attribute. It is not available in the “Fields to display”. You can only add a filter on “inactive” attribute. If you dont see any results when selecting “true” - it means you dont have any disabled identity cubes in the system.
1 Like
Hi All,
What value tells that identity is active or not, Because in identity mapping “inactive“ attribute is empty. do we have to source mapping for “inactive” from any application source ?
I hope IIQDisabled attribute functionality is different, it show particular application account status , is n’t it ? Correct me if im wrong
@sathish3004 Seems you don’t have a mapping defined. You should have mapping established with inactive attribute or any other status attribute and HR application status attribute to determine if the identity is active or not.
You need to review your HR application first and figure out which attribute shows the identity status and then come to identity mapping page to define the mapping with inactive attribute.
Note: Found a fix? Help the community by marking the comment as solution. Feel free to react(, , etc.) with an emoji to show your appreciation or message me directly if your problem requires a deeper dive.
1 Like
Hi @sathish3004
The Inactive flag on the identity represents whether the identity itself is active in IIQ, not the status of individual application accounts.
If the Inactive attribute is empty in Identity Mapping, you must:
Map it from an authoritative application attribute (eg: HR status = Terminated then Inactive = true)
About IIQDisabled
Yes, you are correct.
IIQDisabled is application-account specific, meaning it reflects whether a particular account on a target system is disabled.It does not determine whether the identity is active in IIQ.
Recommended approach:
Map Inactive from the authoritative HR status, for example:
HR Status = Active then Inactive = false
HR Status = Terminated/Inactive then Inactive = true
1 Like
@saiprashanth88 Thanks for the detailed explanation. it was very helpful
1 Like
Hi @sathish3004 , While looking at your screenshot, there is a status extented attribute. You might have mapped the status as and active Try setting the value and running the identity search. You may get a result if the status field is mapped to an HR system attribute.
Thanks,
PVR.