Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Need to change UPN as per required condition

Ratna
New Contributor III
New Contributor III

As per requirement, we need to change UPN while disabling accounts when there is change in user DIVISION. In other cases, under normal termination it should not update UPN. We tried to put in the below mentioned condition in disable account JSON. But, the task is not getting processed.

"userPrincipalName": "${if(user.Division='BU10')?{user.customproperty2} else {user.customproperty1}}"

7 REPLIES 7

Amit_Malik
Valued Contributor II
Valued Contributor II

"userPrincipalName": "${if(user.division='BU10'){user.customproperty2} else {user.customproperty1}}"

 

Kind Regards,
Amit Malik
If this helped you move forward, please click on the "Kudos" button.
If this answers your query, please select "Accept As Solution".

Hi @Amit_Malik ,

I tried "userPrincipalName": "${if(user.division='BU10'){user.customproperty2} else {user.customproperty1}}"

But the task is not getting processed. Is there any other config that we're missing?

Amit_Malik
Valued Contributor II
Valued Contributor II

any error in logs ? retry count increasing ??

Kind Regards,
Amit Malik
If this helped you move forward, please click on the "Kudos" button.
If this answers your query, please select "Accept As Solution".

Hi @Amit_Malik ,

Yes, retry counts are increasing but no error in the task.

attached logs for reference. User-BU86831 and remove account task id-2882.

Remova account json:

{
"removeAction": "SUSPEND",
"userPrincipalName": "${user.division == 'BU10' ? user.customproperty2 : user.customproperty1}",
"moveUsertoOU": "OU=Disabled Users,OU=IGA,DC=t52,DC=quadrupel,DC=local",
"deleteAllGroups": "Yes",
"userAccountControl": "514"
}

[This message has been edited by moderator to mask sensitive info]

{
"removeAction": "SUSPEND",
"userPrincipalName": "${user.division == 'BU10' ? user.customproperty2 + '@xx.com' : user.customproperty1 + '@xxx.com'}",
"moveUsertoOU": "OU=Disabled Users,OU=IGA,DC=t52,DC=quadrupel,DC=local",
"deleteAllGroups": "Yes",
"userAccountControl": "514"
}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

rushikeshvartak
All-Star
All-Star

"userPrincipalName": "${user.division == 'BU10' ? user.customproperty2 : user.customproperty1}"


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi @rushikeshvartak ,

I tried "userPrincipalName": "${user.division == 'BU10' ? user.customproperty2 : user.customproperty1}".

But the task is not getting processed. Is there any other config that we're missing?