Invalidate SAP Entitlements after user valid to date

[juvis]

Hi, 

What would be the best way to invalidate SAP-related entitlements after certain amount of time (few days)? 

We have an user update rule that already has deprovision access tasks for accounts only and access only but the time period is different. Entitlements should be invalidated sooner. 

How could this be done? SAP Entitlements are not part of certain role, so deprovisioning role task would not help. What feature would do this task? 

Thank you for any ideas! ‌‌

[rushikeshvartak · Accepted solution]

You can enable "Ask For Start Date End Date While Adding Application Role along with Entitlements Request" feature from endpoint & that should create revoke task.

if you want once account is disable end date entitlements also then set TERMINATED_USER_ROLE_ACTION=ENDDATE in connection

[juvis]

Thank you 🙂