Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

User termination based on their timezone

vivek9237
Regular Contributor
Regular Contributor
We have a requirement where we need to terminate users at a specific local time(let's say 5pm) on their enddate.
We got few approach in this forum based on Sav4Sav route.
We had one alternate approach to this. Just wanted it checked with a wider forum.
 
Context:
We will receive the user's enddate in UTC.
We will receive the user's timezone info.
We have to terminate the user(trigger remove account tasks) at user's 5PM local time.
 
Our approach:
1. Use inline preprocessor to calculate the UTC time that the user should get terminated and store it in a customproperty(Let's say cp10). (This can be calulated as we have the enddate, user's timezone, and 5PM local time is constant in this case)
2. Create User Update Rule, 
i. Check the checkbox - Retrofit rule actions for users (Invoke from Detective Job)
ii. Write Advance condition such that the rule should be trigger for the users where their cp10 time is within the last 30mins.
iii. In Action, mention the action as per you requirement.
3. Create a job for DETECTIVEPROVISIONINGRULESJOB to only run the rule created in step 2.
4. Schedule it to run every 30 minutes.
 
 
Let me know if we are missing any edge cases or the Sav4sav option is a better approach than this one. Thanks.
Regards,

Vivek Mohanty


If this reply answered your question, please click the Accept As Solution button to help future users who may have a similar problem.
2 REPLIES 2

rushikeshvartak
All-Star
All-Star

DETECTIVEPROVISIONINGRULESJOB  always take long time see if you can get rid of it by updating some customproperty using sav4sav DB import 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

nimitdave
Saviynt Employee
Saviynt Employee

@vivek9237 , instead of detectiverule job , use a saviyntforsaviynt to update another cp and do the deprovisioning.