IAM

Expand all | Collapse all

parameter which retrun success to isim without any trigger to adaptor

  • 1.  parameter which retrun success to isim without any trigger to adaptor

    Posted 3 days ago
    With reference to isim and custom adaptor, Looking for parameter which is required to return success to isim so that account will be deleted from isim and not from target system since target is not allowing deletion operation and have requirement to maintain the same at end point.

    Also need to call suspension operation in delete workflow for inactivation trigger , hence not just joined start to end node in delete workflow.


    ------------------------------
    Padam Khatana
    ------------------------------


  • 2.  RE: parameter which retrun success to isim without any trigger to adaptor

    Posted 3 days ago
    The result code in custom adapters are fully under your own control - so basically you should just create a delete process that returns a success but not doing anything. The messages ar documented in the Adapter Development package downloadable from IBM Passport Advantage (aka PPA).

    That said - this is tricky setup and should be handled with some care - you will need to have some process in place that knows that the account is "deleted" although it still exists - else it will be recrated in ISIM on the next reconciliation. And you should make this process different from the Suspend Account status of the account as you probably will need to have suspended accounts returned by reconciliation.  This makes the the delete workflow different from the suspend workflow...

    It is my advice that you handle this in the custom adapter - not in ISIM - as you there will have the full control over the process.

    HTH
    Regards
    Franz Wolfhagen

    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------