Return
-
Title
Controlling UndoDeprovisioning functionality in Safeguard Authentication Services Active Roles Integration Pack -
Description
In some scenarios, it may be desired to control if users who are UndoDeprovisioned via Active Roles are Unix-Enabled again.
Users who still need Unix access to re-request it if they are UndoDeprovisioned. -
Cause
Currently, the Active Roles Script Modules that control the UndoDeprovisioning process have hard-coded functionality and it is not possible to prevent accounts that were Unix-Enabled previously from being re-enabled.
A change to this hard-coded functionality is being tracked as Defect ID 420137.https://support.oneidentity.com/essentials/support-guide/ -
Resolution
WORKAROUND
Please see attached Deprovision Unix User script module. The modified onUnDeprovision function takes in the existing UnixDisable parameter and re-enables the user or not depending on the value of this parameter. A similar modification should be implemented in the Deprovision Unix Group script module if needed.- Replace the Deprovision Unix User script module from the Safeguard Authentication Services Active Roles Integration Pack with the attached script module
- Modify the desired Undo User Deprovisioning Policy with a script module and choose the modified Deprovision Unix User script module
- On the Policy Parameters page, set UnixDisable to False
- Save the policy
STATUS
An Enhancement Request has been created to integrate this functionality into the Safeguard Authentication Services Active Roles Integration Pack. Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release.
For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/ -
Change Request
420137 -
Attachments