Dependent Endpoint Account Removal

[Sivagami]

I have App A Which has Ent AX and Ent AY

I have App B which has Ent BX and BY

I need to only have App A requestable and App B needs to be configured as dependent of App A

We made sure below entitlementmap set up is done

• Ent AX has entitlementmap set which is BX 
• Ent AY has entitlementmap set which is BY

When a user requests for App A & entitlement AX, they get provisioned to

App A -> Entitletment AX and App B Entitlement BX

Similarly, when a user requests for App A & entitlement AY, they get provisioned to

App A -> Entitletment AY and App B Entitlement BY

Viceversa for entitlement removal as well, when AX is removed BX is also removed. When AY is removed, BY is also removed.

Only problem is with account removal, when App A account itself is removed, requirement is to have App B account removed as well but it's not happening with entitlementmap set up.

How do we achieve our usecase?

-Siva

[shivmano]

One way would be to have an actionable analytics in place to deprovision account in App B when the remove account task for App A is completed 

[Sivagami]

Thanks for the actionable analytics option. 

I was trying to explore the feature per say. What does mapped endpoint in endpoints page do? Does it help with the behavior?

-Siva

[shivmano]

I think mapped endpoint means that if app B is added as mapped endpoint in App A, then in order to get App B, the user will first need to have app A as pre-requisite. 

@naveenss @Darshanjain Let me know if I am wrong

[Darshanjain]

Yes thats correct @shivmano 

Thanks

Darshan

[naveenss]

@Sivagami  you can setup an actionable analytics control as suggested by @shivmano  to achieve this case. Else, you need to have a detective user update rule (which personally I don't recommend in this case).

[Darshanjain]

Hi @Sivagami 

Can you let me know how did you map App B as dependent of App A, what config you have used to achieve this so that i can check this 

Thanks

Darshan

[Sivagami]

Hi Darshan,

What we basically did is to configure entitlementmaps between App A and App B. 

App B is not made requestable & only App A is requestable.

App A entitlement provisioning requests will provision App B entitlements as well.

-Siva