Hi! I am trying to figure out the best way to handle this situation. When we create accounts, we set 2 virtual attributes (edsvaLMSManager and edsvaLMSApprover). Both of these virtual attributes use the DN of the users that are set for their LMSManager and LMSApprover. When the LMSManager and LMSApprover accounts are deprovisioned, we have found that they are not being removed from the accounts and are just displaying as deprovisioned on the accounts they are set for. What is the best way to clear these virtual attribute fields for any account that they are set on when these users are deprovisioned?
In my mind, I feel like when an account is deprovisioned, we would need to search through all SSO accounts, get a list of the users that have the edsvaLMSManager and edsvaLMSApprover set as the deprovisioned user, then clear those attributes. However, I am not sure how to achieve this.
Any suggestions or advice is appreciated.