Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Azure AD connector: filter for guest accounts does not inactivate older accounts

pivitale
New Contributor III
New Contributor III

Hello,

we have a filter on the azure AD connector

FILTER_ACCOUNTS: NotIn(userType,'Guest')

It works well because it does not import the newly created "guest" accounts, but it doesn't suspend the accounts already present in Saviynt. Any idea?

We have also this configuration in place

 "deleteLinks": true,
"inactivateAccountsNotInFile": false

on the STATUS_THRESHOLD_CONFIG JSON

 

Kind regards

@JustSalva 

3 REPLIES 3

rushikeshvartak
All-Star
All-Star
inactivateAccountsNotInFile": true

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

pivitale
New Contributor III
New Contributor III

but with 

inactivateAccountsNotInFile": true

the accounts should be marked as "SUPENDED FROM IMPORT SERVICE" why it is not happening?

Share full status threshold json. Does your threshold limit exceeded ? Does your existing accounts having blank status? 

Do select distinct status from accounts where endpointkey=1


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.