This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

A way to log off an user from AD

Hi All,

Is there any way to log off a user from AD by means of OIM(Workflows, tasks or something similar?)

Let say I disable a user using the Web Shop, but the user is still logged in to his/her applications. Therefore, the user will still be able to work until he/she logs off.

In this context, would it be possible to use OIM to log off the user as soon as it has been disabled?

Thank you

  • Hello Eugen,

    As of 8.0 there is the following, quoting from the release notes:

    Cyclical checking of authentication for existing connections.
    The system runs validity checks for open connections to prevent users from
    working with existing connections if they have been deactivated after they
    logged in. The check is carried out by the next permissions-based action on the
    connection after a configurable interval of 20 minutes. The interval is defined
    in the configuration parameter "Common\Authentication\CheckInterval".

    So, after the employee record is deactivated, after not more than 20 minutes by default, the session will refuse any read/write operations on the database.

    Regards

    Hanno