8.3
While account aggregation, I want to identify if the identity lifecycle status is deactivated, if it is deactivated then run deprovisioning of the account.
Hi @ankitranjanm4,
what you mean for identity lifecycle status in your case?
Also, are you talking about on the authoritative source or a target application?
So, you can use the customization rule, check the condition and execute a workflow for deprovisioning the account.
Can you share more info?
During the aggregation process, we utilize email as the key for correlation, gathering identities associated with the same email into a list.
Next, we assess each identity’s lifecycle status, aiming to match them with an activated identity from the list. This approach works well when an identity is active. However, issues arise with deactivated or leaver identities; in these cases, an account is still created and linked to a leaver identity, preventing the leaver trigger from activating and thus leaving the account active indefinitely.
To address this, we seek to initiate deprovisioning at the point where it becomes clear that there are no active identities available for correlation with the account.
yes, this is a target application.
you can have custom Lifecycle event with including all identities(which are inactive) and trigger a workflow to de-active the accounts if they are found any active accounts even if the identity is inactive.
Thanks
Thanks, we want it done as soon as it is identified during aggregation. Is there a way to achieve this.
You can check it in the customisation rule and trigger a workflow to handle the de-provision of the account ( but as per my understanding this is not the ideal way)
as mentioned above, let the account get aggregated and deprovision those type of accounts using a custom Lifecycle event and run the identity refresh immediately after the aggregation with process events.
Thanks
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.