AD endpoint filter entitlements go inactive

[Community_User]

Originally posted on August 27 2020 at 15:51 UTC

I have several endpoints set up under my connected Active Directory. I have also added them in the Endpoints filter in connections. However, every day they are going to "Inactive" status. They are also not being applied to my end users AD accounts once approved. It acts like it is complete, but nothing is applying. If they chose the same security group under the Active Directory endpoint itself, all functions as it should.

We pulled many systems out to help with user experience, instead we are causing more frustrations.

[Community_User · Accepted solution]

Originally posted on August 28 2020 at 08:55 UTC

Hi Tiana,

Greetings!!

I have some follow-up questions:

1) Version of SSM which you are using

2) If i understood your query properly, the you mean to say that, Your endpoint filter based accounts are getting inactive frequently even having association with an active AD group and endpoint filter are not getting associated to its Parent Account and User Identity.

Please correct me, if i am wrong.

Looking forward to you for the details.

Thanks & Regards,

Anand Kumar Jha

[Community_User]

Originally posted on September 3 2020 at 12:53 UTC

I do not recall seeing the reply. My answer is yes.

[Community_User]

Originally posted on September 3 2020 at 13:10 UTC

Hi Tiana, Greetings!! I am yet to get answers of below questions: 1) version of SSM you are using. 2) could you please let me know if this behaviour is visible post full / incremental Access import. 3) is this issue seen even after requesting access to filter based endpoint for new account/ add access ( where account is missing it's linkage to parent endpoint account and user) Looking forward to you for the answers. Thanks and Regards, Anand Kumar Jha