Hello,
I have an Active Directory provisioning connector and need to configure a specific deprovisioning action when an identity loses its provisioning right.
Depending on a particular status of the identity, I need either to:
delete the Active Directory account (
DELETE_APPLICATION_OBJECT), ortake no action (
NO_OP).
I was considering using a custom rule in my application configuration for the onApplicationUnassignedEvent and onIdmObjectDeleteEvent events. However, I don't know how to trigger the DELETE_APPLICATION_OBJECT action from a Groovy script.
If you have any idea how to invoke DELETE_APPLICATION_OBJECT from a custom rule, I would appreciate it.
Thank you for your help.