Is there a way to do conditional status recon for Active Directory accounts?

[dhanashree_m]

We want to pull locked or unlocked status from AD but the attribute in AD "lockOutTime" does not have fixed set of values, so need a way to add conditional status mapping.

[Manikanta_S]

Hi Dhanashree,

You can achieve this using "STATUS_THRESHOLD_CONFIG " in AD Connector.

Please refer to the STATUS_THRESHOLD_CONFIG  part in the below document.

https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...

Please let me know of this helps!

Thanks & Kind Regards,

Manikanta.S

[rushikeshvartak]

Add below config in STATUS_THRESHOLD_CONFIG under AD Connection 

{
"statusAndThresholdConfig":{
"lockedStatusColumn":"customproperty30",
"lockedStatusMapping":{
"Locked":[
"0"
],
"Unlocked":[
"512",
"544"
]
}
}
}

[dhanashree_m]

We dont have defined values for locked - it is a date field on AD side. It will have date when the account gets locked. Also for Unlocked, the value will be 0 when I unlock user otherwise we will not be present in AD.

512,514 are mapped for status but I am looking for getting Locked or Unlocked and not  active/inactive

[avinashchhetri]

Just a query, how are you planning to use the locked vs unlocked once you have (lets assume) defined and imported it via the connector ?

Regards,

Avinash Chhetri

[dhanashree_m]

Locked and Unlocked status will be used through getaccounts API to show unlock option based in UI based on this status.

[avinashchhetri]

Dhanashree,

If the intended usage is via the API, which probably feeds into the Custom UI, wouldn't it make sense to get the data from AD as is and use the logic in the custom UI to show locked vs unlocked based on the content of the attribute, NULL and 0 as unlocked while any value as locked ?

Getting back to your original query, I have personally never seen conditional logic being used in the statusAndThresholdConfig section, Im not saying it is not supported, Maybe someone who has done that before can help out.

Regards,

Avinash Chhetri