Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Provisioning BR accounts to Rehired users

Bharadwaj319
New Contributor III
New Contributor III

Hello,

We have a scenario where we expect users to be rehired on the same day but with a conversion in UserType (Contractor to Full Time Employee). We will need to deprovision their existing access and create new Accounts for them in AD on the same day. We are able to achieve this using the User Update and Technical Rules, but there is a challenge as we are enabling the below option at the endpoint level.

Bharadwaj319_0-1667469586470.png

Due to this we will have to wait for the account import to complete to rename the respective existing account and mark the status as Suspended. 

Is there something that could be suggested to handle rehire account provisioning with the above endpoint config still on?

8 REPLIES 8

rushikeshvartak
All-Star
All-Star

You can change account name from Saviynt 4 Saviynt ? or did u tried filter of account name based on status ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi Rushikesh,

We are exploring option on the Saviynt 4 Saviynt connector. Meanwhile can you please tell us what is the option with filtering the account name based on status mean?

Under endpoint - account name rule - status filter 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

@rushikeshvartakWe tried the Sav4Sav connector to update the user's name and status by triggering the updateAccount task from user update rule but as a next Action in the rule, we are unable to trigger the new Account task for AD immediately as the update account task will only be processed once the Provisioning job runs. Do you have any suggestion to trigger the new Account tasks with a delay.

Bharadwaj319_0-1669041159188.png

The Test Tool Rule is responsible to create New Account Tasks

create chain job for same. First update account task will be processed followed by New Account Tasks


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

I understand you are referring to the below job, right?

But that is set to be Deprecated.

Bharadwaj319_0-1669096165625.png

Regards,

Bharadwaj.

Executing technical rule trigger now as part of technical rule itself. No need to come from user update rule.

https://forums.saviynt.com/t5/identity-governance/detective-job-deprecated-what-is-replacement/m-p/1...


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Trigger chain is different job


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.