Requests for rehires

[erinlewis]

We have an issue frequently for rehires. They've worked at our company before and had accounts/access within different applications. When someone tries to request access they get a message that an inactive account for user exists and new account request is disabled.

 

We tried disabling at the endpoint the setting "Disable New Account Request if Account Already Exists". When we tried to request it, it asked to verify the AD account and we select it but when gives a screen to enter the username. We don't want them to have a different username. We want to give them back the account and access with the username they used previously. Their account is in a suspended from import state.

 

[rushikeshvartak]

• Account status should be SFIS and name should -Deleted on timestamp

[erinlewis]

The status is suspended from import and the username does have -delete but it still won’t allow us to request.

[rushikeshvartak]

It seems status has been updated manually please change accountname in format mentioned 

[erinlewis]

It was not changed manually. It was already in a suspended from import state and the username already had -deleted at the end which is why I’m asking the question of why we can’t re-request access.

[rushikeshvartak]

Share screenshot of account name and status

[erinlewis]

 

[rushikeshvartak]

What about account name rule for endpoint provide screenshot 

[erinlewis]

 

[rushikeshvartak]

Disable below option in endpoint

[erinlewis]

We tried disabling that setting; however, then we get a different message. When we request the access it gives the pop up to select which AD account. We select the account and then it pops up a box to enter the username. No matter what you enter in that username box it won't go forward. It's also a bad end user experience as managers don't know what to do.

[rushikeshvartak]

Can you share logs

[erinlewis]

We just had this scenario, I disabled the setting "Disable New Account Request if Account Already Exists". When I try to request the account/access it gives me this selector 

I select the account and then I get this

Since this is an AD endpoint we don't want it to have another username

[This post has been edited by a Moderator to remove sensitive information.]

[erinlewis]

If I try to put a different username in then we get this error

[This post has been edited by a Moderator to remove sensitive information.]

[erinlewis]

I also have logs but didn't know if I should upload those here.

[rushikeshvartak]

Please check with NEO request module

[erinlewis]

What is the NEO request module?

[rushikeshvartak]

https://saviynt.com/blog/introducing-neo#:~:text=Meet%20Neo%20%E2%80%93%20a%20design%20system,t%20ju....

[erinlewis]

We aren't using the new experience yet and I can't enable this without communication.