UnDeprovision in ActiveRoles Sync Engine

Hello all, 

I am trying to un-deprovision users throught the ActiveRoles SyncEngine.

It works fine if the account is deprovisioned using the script below:

$IsDeprovisioned = $dstObj["edsvaDeprovisionStatus"]
Switch($IsDeprovisioned)
{
1 {"1"; break}
default {$edsvaUnDeprovision=$null}
}

However is the account is not deprovisioned, it returns an error: Error details: Input string was not in a correct format.

It look like a  value can only be written to this attribute when the account is actually deprovisioned. 

Parents
  • Couple of thoughts here:

    Why don't you check the status of this flag in your Synch job scope criteria so that objects that are not in a deprovisioned state are excluded from processing?

    Are you using a "Deprovisioning" sync job step to deprovision the accounts in the first place or how are they getting that way?

    Me, when automating deprovisioning I will normally deprovision objects using such a step or:

    1) Deprovision-QADUser cmdlet
    OR
    2) A Deprovisioning Activity in a workflow

    Food for thought.

Reply
  • Couple of thoughts here:

    Why don't you check the status of this flag in your Synch job scope criteria so that objects that are not in a deprovisioned state are excluded from processing?

    Are you using a "Deprovisioning" sync job step to deprovision the accounts in the first place or how are they getting that way?

    Me, when automating deprovisioning I will normally deprovision objects using such a step or:

    1) Deprovision-QADUser cmdlet
    OR
    2) A Deprovisioning Activity in a workflow

    Food for thought.

Children