Accounts show active after fully disabled Endpoints.

[ssingh16]

Hi Team,

Issue: When we disabled the endpoints (Security System, Endpoint, Connection), then the accounts associated with the system were still showing "Active" instead of "Decommission Inactive" in the Saviynt.

Below are the steps we have performed to decommissioned.

1. Disabled the connection. 

2. Disabled the endpoint 

3. Disabled the security system

Please note, we expect endpoint and security system to be disabled automatically once the connection is disabled but this did not happen, hence we disabled the endpoint manually and security system through custom query job using below query. 

update securitysystems set status = 0 where displayname in('C7S000_SAP CRM')

We disabled other endpoints also; after disabled, all accounts were not in active status, but the issue is only with C7S000 systems.

Could you please provide your insights? They would be appreciated.

Thanks,

Satyam

[dgandhi]

The status of the account wont change automatically to Inactive or SUSPENDED FROM IMPORT SERVICE once you disable the endpoint / security system. Run the job to make the accounts as Inactive or SUSPENDED FROM IMPORT SERVICE. If running job is not feasible then change the status of the account via custom query job and post that make the endpoint / security system as Inactive.

[ssingh16]

Hi Team,

We expected the endpoint and security system to be disabled automatically once the connection was disabled, but this did not happen; hence, we disabled the endpoint and security system manually through a custom query job using the below query. But still, accounts show active in Saviynt.

update securitysystems set status = 0 where displayname in('C7S000_SAP CRM')

Let us know if you need anything else.

Thanks,

Satyam

[dgandhi · Accepted solution]

The status of the account wont change automatically to Inactive or SUSPENDED FROM IMPORT SERVICE once you disable the endpoint / security system. Run the import job to make the accounts as Inactive or SUSPENDED FROM IMPORT SERVICE (by modifying the import jsons accordingly) . If running job is not feasible then change the status of the account via custom query job and post that make the endpoint / security system as Inactive.