Disable user when end date is reached

[benjaminp]

Hello,

I need to disable the user (then perform some other tasks like disable accounts...) when the end date of a user is reached.

I thought using user update rules but the fact is that, when the end date is reached, the user is not updated so the rule will not get triggered (I know that for other tasks I can use it with a condition statuskey=0).

So how can I automatically disable users when their end date is reached ?

Thanks in advance

Benjamin 

[rushikeshvartak]

User related information should come from trusted source. However you can achieve using

• Saviynt 4 saviynt connector

Or using custom query ( which is not proposed in saviynt) 

[benjaminp]

Thanks for your answer.

The user information comes from a trusted source, no issue on this, we know that the end date is reliable. Can you please give me a quick example of how to do this (disable user when end date is reached) in the Saviynt for Saviynt connector ?

Regards,

Benjamin

[rushikeshvartak]

You can create Disable account task. In Disable Account JSON Of saviynt 4 saviynt you can mention update users set statuskey=0 where username=xyz

[sahajranajee]

@benjaminp ,

Since the data is coming from the trusted source, You can write a user import preprocessor query to compare the enddate to current date, and for those users, set the statuskey as 0.  This would remove the need for an additional SaviyntforSaviynt user import.

User Import PreProcessorDocumentation : https://saviynt.freshdesk.com/support/solutions/articles/43000571860-normalizing-the-identity-data-u...

[benjaminp]

Hello,

Thanks for your answer.

And if the user is directly created in Saviynt (thus not from a connection), how can I set its statuskey to 0 when enddate is reached ?

Benjamin

[GHitchens]

Hi @sahajranajee ,

Just came across this topic as we also have a need to automate the setting of user status to 0 upon a contractor End Date being reached.

I thought the preprocessor was only for user import not existing user updates based on a condition?

Are you able to provide any further information or examples of how this is configured aside from the article mentioned?

Many thanks

[rushikeshvartak]

You can create user update rule in that case @GHitchens @benjaminp 

refer  https://forums.saviynt.com/t5/identity-governance/create-a-task-when-user-gets-disables-or-enabled/m... 

[GHitchens]

In our example however the user isn't being updated, the End Date was populated on import and is a static contractor date. Therefore I believe the User Update rule won't trigger as the user hasn't been updated.

Cheers

[rushikeshvartak]

You can create actionable analytics report with Disable Account action

refer syntax ; https://saviynt.freshdesk.com/support/solutions/articles/43000606546-configuring-allowed-actions#Con...