AD last logon monitoring

[Ankky]

Hello Team,

We have a usecase to monitor last logon timestamp in Active Directory and disable the account if user hasn't logged-in to the system for 45 days.  Saviynt should notify user's manager if there is no logon activity from past 30 days and manager should have the capability to allow extension to the user. If manager allows extension then system shouldn't disable the account on 45th day else system should disable the account on 45th day.

Can we generate an approval in the above usecase where manager can log-in to Saviynt and approve/reject the extension request? If not, what is the best possible solution for this usecase.

Thanks

[rushikeshvartak]

You can configure analytics report to send alert but manager needs to raise request to enable account.

[Manu269]

I believe you are pulling the last logon data from AD in EIC everyday.

Create an analytics report for such case where user hasn't logged-in to the system for 45 days.

Send a report to manager for such details.

Anyhow, enable the extension is not auto generated.