IBM Security MaaS360

 View Only
  • 1.  Automated User and Device Deactivation.

    Posted Tue November 13, 2018 09:04 AM
    We have User Deactivation set to sync with our MS Active Directory.

    The deactivation summary email currently only shows the raw count of users and devices deactivated, not the names.  This makes account auditing more difficult as this feature doesn't appear to get 100% of the users as they are disabled.

    Are there any plans in your roadmap to list the actual Username, Email address of the deactivated user in the summary emails?


    ------------------------------
    -DRU
    ------------------------------


  • 2.  RE: Automated User and Device Deactivation.

    Posted Tue November 13, 2018 02:51 PM
    Hello,

           Just joined the community, and am a partner. I'm confused about your question.

    Regards,

    Mr. Glennell Burnette






  • 3.  RE: Automated User and Device Deactivation.

    Posted Tue November 13, 2018 04:59 PM
    In Maas360, from the menu ... Users, More, User Settings, Basic ...

    The first option.   
    "Specify the behavior on user being inactivated" is set to:  "Mark the user and devices in Maas360 as Inactive"

    So when a user departs the company, and their user is account is disabled in Active Directory, a period of time (up to 48hrs) afterwards Maas360 will mark the user and any devices they had as inactive.

    I periodically get a summary email from Maas for these deactivations.
    The message looks like this:

    Summary of automated user & device deactivations:

    Local Directory users detected as inactive between: 11-12-2018 20:00 GMT to 11-13-2018 00:00 GMT

    Number of Local Directory users deactivated: 1
    Number of devices of Local users deactivated: 0

    User Directory users detected as inactive between: 11-12-2018 00:02 GMT to 11-12-2018 04:02 GMT

    Number of User Directory users deactivated: 3
    Number of devices of User Directory users deactivated: 2


    I am asking if there are any plans in the road map of Maas to provide a list of the User ID's or Email Addresses that were deactivated in this automated fashion, rather than just a summary count.




    ------------------------------
    -DRU
    ------------------------------



  • 4.  RE: Automated User and Device Deactivation.

    Posted Wed November 14, 2018 01:44 PM

    Hi Andrew'


    I am not the one whom makes deletion decisions, seeing as how I don't receive a salary, nor paycheck from IBM. Are you trying to tell me that partners are deactivated, including community users? If the system is set up to delete inactive people, partners, and community users should be notified via U.S. Postal Mail, since cracking, hacking, and tapping is throughout IT!


    From: Mr. Glennell Burnette

    Original "Icon Electronics" USA Owner

    NC Merchant Certificate Holder Since Jan.-2003

    FCC-GROL w/Radar Endorsement Holder

    INARTE Proctor/Telecom Specialist






  • 5.  RE: Automated User and Device Deactivation.

    Posted Wed November 14, 2018 12:44 PM
    Edited by Sathyajith Prabhu Wed November 14, 2018 12:45 PM

    Hi Andrew,

    This should be feasible. Would you be keeping track everyday which are the users which got deactivated? Would like to understand the use case more. You can raise a Request for Enhancement (RFE) and mention the details there.
    Also the payloads from the Cloud Extender are not sent all at once. They are usually sent in few batches. It is done every few hours and the users getting disabled would depend on the payload received from CE. If you see a bug, please do contact support.

    Link for RFE - https://www.ibm.com/developerworks/library/clear17/fiberlink/index.html



    ------------------------------
    Sathyajith Prabhu
    MaaS360 Offering Management
    ------------------------------