Stale User Deprovision and Undoing deprovision

I have a workflow that runs ever night. It will automatically deprovision any user with a certain timeframe of inactivity. Every now and then, a user does attempt to use their account and we have a process to undo the deprovisioned status in place. However, if the user doesn't log in the same day we undo it, they will be deprovisioned again that night. 

Any suggestions on how we can ignore an account like this from being deprovisioned for a set period?

Parents
  • Assuming you have a Search workflow step that is locating the inactive user objects to Deprovision, you could add an extra search condition that also looks at a DateTime Virtual Attribute (to be created or find an existing AD attribute to use) that is populated with a date upon an undo-Deprovision operation. You could create a DateTime Virtual Attribute for User objects and then have a Change Workflow populate this attribute with the date of the undo-Deprovision operation.

Reply
  • Assuming you have a Search workflow step that is locating the inactive user objects to Deprovision, you could add an extra search condition that also looks at a DateTime Virtual Attribute (to be created or find an existing AD attribute to use) that is populated with a date upon an undo-Deprovision operation. You could create a DateTime Virtual Attribute for User objects and then have a Change Workflow populate this attribute with the date of the undo-Deprovision operation.

Children