Lockedout uses and the requests

[UmaSankar]

Hi,
Requests for locked out users are being processing by Saviynt but not in the backend or target system as the user accounts are locked out. This is leading to a situation where Sav and the target systems are not in sync. After the Users accounts are unlocked, they will not be able to raise a request for the same roles as the roles are assigned to Users at Saviynt end. Is there any way to stop this beavhiour or sync issue?

Thanks,
UmaSankar.

[sk]

If in backend they are not getting provisioned ideally task should error out or failed. Are you saying is getting completed but not getting provisioned?

[UmaSankar]

Yes, they were not errored out. Hence Sav is treating it as the role is already assigned to the user.

[rushikeshvartak]

Assuming SAP connector and userlock is 64 which is locked by Admin hence its expected behavior 

[UmaSankar]

@rushikeshvartak  Isn't this a security issue? Is there any way that I can configure this beahviour so that Sav will not allow the user not to raise a request for any role if the an account is locked out in the target system?