This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Leaver process of an identity

Hi experts,

We have an issue related to the leaver process of an identity. Our authoritative source is SAP-HR, whenever the SAP connector sets a MARKEDASOUTSTANDING because the identity is no longer there, the resources assigned to that identity are not being removed. The account definitions such as mailbox or active directory accounts are still there in the identity.

Are we forgetting something? Some place where we could control the resources membership?

Thanks in advance.

Parents

0 mekindad over 5 years ago

If You would like to remove outstanding objects You have to do that manually in most of the cases or write a process for it. You can not change MARKEDASOUTSTANDING to DELTE on Person as it will not allow to delete Employees with assigned account definitions!

You can create a custom process to first permanently disable affected Persons which can trigger Account definition removal and then to remove them or...

...ask HR to set dates or other attributes in a way that You catch some events before those users are deleted in SAP ... this way You can set some triggers that will can disable account and remove all stuff.

A suggestion for enhancement : Remove account definition on OUTSTANDING ?!
Cancel
Up 0 Down

Cancel

Reply

0 mekindad over 5 years ago

If You would like to remove outstanding objects You have to do that manually in most of the cases or write a process for it. You can not change MARKEDASOUTSTANDING to DELTE on Person as it will not allow to delete Employees with assigned account definitions!

You can create a custom process to first permanently disable affected Persons which can trigger Account definition removal and then to remove them or...

...ask HR to set dates or other attributes in a way that You catch some events before those users are deleted in SAP ... this way You can set some triggers that will can disable account and remove all stuff.

A suggestion for enhancement : Remove account definition on OUTSTANDING ?!
Cancel
Up 0 Down

Cancel

Children

0 Markus Weiss-Ehlers over 5 years ago in reply to mekindad

mekindad If an account is managed by OneIM he is the master of this account and any appearing OUTSTANDING should be the rare case that should be handled separately.

marcos.perez.fontan Which version are you using?
Cancel
Up 0 Down

Cancel
0 marcos.perez.fontan over 5 years ago in reply to Markus Weiss-Ehlers

Our version is 7.1.2
Cancel
Up 0 Down

Cancel
+1 Markus Weiss-Ehlers over 5 years ago in reply to marcos.perez.fontan

To bad. Version 8.1 would allow you to provide a custom method in your synchronization step that would just set a flag in the person (IsInactive as an example) instead of deleting it (or marking it as outstanding).

One option in your case would be to implement a custom process that checks all outstanding persons and in step one removes the outstanding flag and then sets the IsInactive flag.
Cancel
Up 0 Down

Cancel