Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

LDAP Recon - Status field Blank in Target for Active Accounts

ssudhakar
New Contributor III
New Contributor III
Hi Team,
 
We are connected to OUD using OOTB LDAP Connector(AD Connector) and nsAccountLock is status attribute in target and its set to TRUE for Inactive Accounts and attribute not present for Active Accounts.
 
So, when we reconcile the ldap accounts, for Active Users status is getting set as Inactive as recon is not bringing in any value on customproperty28 mapped with nsAccountLock.
 
How we can set the status to Active when value is null or not present in recon time through OOTB Connector STATUS_THRESHOLD_CONFIG or through ACCOUNT_ATTRIBUE mapping ?
 
tried with null and "" in the activeStatus and tried setting inactiveStatus also
 
current mapping
 
{ "statusAndThresholdConfig": { "statusColumn": "customproperty28", "activeStatus": [ "0","FALSE"], "deleteLinks": false, "accountThresholdValue": 100, "correlateInactiveAccounts": true, "inactivateAccountsNotInFile": false } }

Let know how we can achieve the requirement 

9 REPLIES 9

Manikanta_S
Saviynt Employee
Saviynt Employee

Hi Sudhakar,

Is the use of nsAccountLock attribute mandatory in your use case?, or you are trying to set status as active/inactive for users ?

Thanks & Kind Regards,
Manikanta.S

Rajesh-R
Saviynt Employee
Saviynt Employee

Hi Sudhakar,

If I understand correctly, the necessity to derive the account status based on the nsAccountLock Value. Fair enough. Meanwhile evaluate if there are any other attribute is defining the Account status in OUD.

But For this use case the statusAndThreshold Config,  I understand that your Assumption is as follows, Please confirm

nsAccountLock - Empty / null / 0 / FALSE - The status of the account is Active

nsAccountLock - Any other value - The status of the account is Inactive.

 

Try the following and keep us posted.

{ "statusAndThresholdConfig": { "statusColumn": "customproperty28", "activeStatus": [ "0","FALSE","",null], "deleteLinks": false, "accountThresholdValue": 100, "correlateInactiveAccounts": true, "inactivateAccountsNotInFile": false } }

 


Thanks
Rajesh Ramalingam
Saviynt India

ssudhakar
New Contributor III
New Contributor III

Hi Rajesh,

We tried using "" and null in the activeStatus, still the account shows Inactive Status.

Regards,
Sudhin Sudhakar

Hi Sudhakar,

Which version of Saviynt are you on ?

You may want to try the config shared below where you just pass the value of the inactiveStatus from the directory. Though I've not tried this myself but this should mark everything else as Active as long as the value in the inactiveStatus is not matched.

{
"statusAndThresholdConfig":
{
"statusColumn":"customproperty28",
"inactiveStatus": ["TRUE"],
"deleteLinks": false,
"accountThresholdValue" : 100,
"correlateInactiveAccounts":true,
"inactivateAccountsNotInFile":false
}
}

 

Regards,

Avinash Chhetri

Regards,
Avinash Chhetri

ssudhakar
New Contributor III
New Contributor III

Hi Avinash,

We tried this option too on version 2021. but no luck.

We did a workaround through DB Account Import and created a trigger chain job to handle the issue.( LDAP Account Import, DB Account Import for status change)

Regards,
Sudhin Sudhakar

Hi Sudhin,

Could you share the JSON that you are using for STATUS_THRESHOLD_CONFIG ?

 

Regards,

Avinash Chhetri

Regards,
Avinash Chhetri

Sudhin,

is your issue resolved ?

 

Regards,

Avinash Chhetri

Regards,
Avinash Chhetri

ssudhakar
New Contributor III
New Contributor III

Hi Team,
We have a workaround in place to control the status through an additional DB Account import.
STATUS_THRESHOLD_CONFIG did not help to address the issue.

Regards,

Sudhin Sudhakar

 

 

This feature should have been supported OOB. If you could open a freshdesk ticket with the supporting logs, that would be helpful to get to the bottom of this issue.

 

Regards,

Avinash Chhetri

 

Regards,
Avinash Chhetri