I would like to create a rule to be triggered where a users leave date is the same as the current system time.
Within the Rule type "User Access" you can build a condition for "Verify that the specified users" where a identity attribute leave date is before, on or after, is null or not null but does anyone know if there is a way to use the advanced clause screen to say "user."Leave Date"='system date'"?
I have attached the screen where I would like to enter a query to do this.
Is this possible?
That seems to work so thanks for that.
Our main goal is to automate the locking of accounts at 5pm on the date that a user is to leave the business. We currently manually disable accounts within AD but need to automate this process.
Terminations appear within our HR feed on the Monday so we believe we need to split the termination actions out so the idea is a trigger a request and create a node in a workflow pause until 5pm on the leave date then to call on AFX to disable the account. I was thinking we may create an application with its own fulfilment workflow to do this but I have no idea what is the way to achieve this functionality.
Any ideas would be apprecieted
Well in this case you can calculate the Is_Terminated attribute in your identity collector based on the leave date value so it flags the user as terminated on the day of his termination (which you probably do now) … but you can use the same SQL logic above for it. Something like:
case when leave_date >= trunc(sysdate) then 1 else 0 end as is_terminated
Then you can schedule your Provisioning termination rule at 5:00 PM daily with actions to disable the accounts you want to disable. That way you take that logic out of your workflows and don't have many waiting workflows in the system …
I never tried to use a User Access rule this way … it would mainly be used for Access Violations. However you might be able to try it this way. The trunc is to get rid of the hour/minute/seconds part of any date and only compare the day part.
"user."Leave Date" >= trunc(sysdate)