Click HERE to see how Saviynt Intelligence is transforming the industry. |
07/02/2024 03:14 PM - edited 07/02/2024 03:16 PM
We have an issue frequently for rehires. They've worked at our company before and had accounts/access within different applications. When someone tries to request access they get a message that an inactive account for user exists and new account request is disabled.
We tried disabling at the endpoint the setting "Disable New Account Request if Account Already Exists". When we tried to request it, it asked to verify the AD account and we select it but when gives a screen to enter the username. We don't want them to have a different username. We want to give them back the account and access with the username they used previously. Their account is in a suspended from import state.
07/02/2024 04:04 PM
07/02/2024 04:07 PM
The status is suspended from import and the username does have -delete but it still won’t allow us to request.
07/02/2024 04:22 PM
It seems status has been updated manually please change accountname in format mentioned
07/03/2024 06:02 AM
It was not changed manually. It was already in a suspended from import state and the username already had -deleted at the end which is why I’m asking the question of why we can’t re-request access.
07/03/2024 08:57 PM
Share screenshot of account name and status
07/08/2024 06:31 AM
07/08/2024 06:33 AM
What about account name rule for endpoint provide screenshot
07/08/2024 07:07 AM
07/08/2024 11:50 AM
Disable below option in endpoint
07/08/2024 11:55 AM
We tried disabling that setting; however, then we get a different message. When we request the access it gives the pop up to select which AD account. We select the account and then it pops up a box to enter the username. No matter what you enter in that username box it won't go forward. It's also a bad end user experience as managers don't know what to do.
07/08/2024 12:49 PM
Can you share logs
07/09/2024 12:20 PM - last edited on 07/09/2024 02:27 PM by Dave
We just had this scenario, I disabled the setting "Disable New Account Request if Account Already Exists". When I try to request the account/access it gives me this selector
I select the account and then I get this
Since this is an AD endpoint we don't want it to have another username
[This post has been edited by a Moderator to remove sensitive information.]
07/09/2024 12:21 PM - last edited on 07/09/2024 02:27 PM by Dave
If I try to put a different username in then we get this error
[This post has been edited by a Moderator to remove sensitive information.]
07/09/2024 12:22 PM
I also have logs but didn't know if I should upload those here.
07/09/2024 09:15 PM
Please check with NEO request module
07/10/2024 06:15 AM
What is the NEO request module?
07/10/2024 09:17 AM
07/10/2024 09:34 AM
We aren't using the new experience yet and I can't enable this without communication.