Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

"ACCOUNT_TERMINATION_ACTION" missing in LDAP/AD connection config

ASA
Regular Contributor II
Regular Contributor II

Hi,

According to this documentation:

Understanding the Integration Between EIC and LDAP Interfaces (saviyntcloud.com)

There should be an option "ACCOUNT_TERMINATION_ACTION" in the connection of type AD. This option is missing.

Does anyone know if this is deprecated maybe?

How do I get an LDAP connection to mark accounts as deleted if not found during import?

6 REPLIES 6

rushikeshvartak
All-Star
All-Star

You can defined in status threshold config


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

ASA
Regular Contributor II
Regular Contributor II

Hi Rushikesh,

can you give an example config? I can't find anything like it in the docs.

Raghu
All-Star
All-Star

@ASA  you can use "inactivateAccountsNotInFile": false, it will suspended :

{
"statusAndThresholdConfig": {
"statusColumn": "customproperty17",
"activeStatus": [
"512",
"544",
"66048"
],
"inactiveStatus": [
"546",
"514",
"66050"
],
"deleteLinks": false,
"accountThresholdValue": 1000,
"correlateInactiveAccounts": true,
"inactivateAccountsNotInFile": false,
"lockedStatusColumn": "customproperty17",
"lockedStatusMapping": {
"Locked": [
"1"
],
"Unlocked": [
"0"
]
}
}
}

inactivateAccountsNotInFile: Specify true or false to instruct the connector to mark accounts that are not imported during import as inactive or SUSPENDED FROM IMPORT SERVICE. When set to
true, accounts that are not imported during import are marked as inactive. The default value is false.

 


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

ASA
Regular Contributor II
Regular Contributor II

Hi Raghu,

thanks for the reply. This already works fine but what I actually need is to recognise the accounts as deleted instead of suspended.

ASA
Regular Contributor II
Regular Contributor II

Wait, nevermind. I seem to have mixed up something during testing on Tuesday 🙂

Setting inactivateAccountsNotInFile to false does exactly what I want.

Thanks!

@ASA  it is system generate , we can do it think so, if want you  can achive via enhanced query update.


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.