...
Column | Changes | |
|---|---|---|
Identity Attribute Value | SerializedValue | Value calculated based on |
Identity Attribute Value | HasChanged | Set to true if attribute values |
Identity Attribute Value | ToDelete | Set to true if attribute values should be deleted on target system |
Identity Attribute Value | OldSerializedValue | Previous value that was calculated and provisioned in target system (no provisioning is done in this task but looking at HasChanged flag we can assume what happend) |
(about sub-actions)
There is logic that calculates if identity should still be active or not.
It will be calculated to should-be non-active when any of following conditions is fulfilled:
Identity is not active was deactivated manually (there is no DeactivatedBy),
Core Identity is in State Suspended (3)
Identity Type Feature SetInactiveIfNoActiveAssignment (7) is not active
AND Core Identity is not in State Active (1)
Identity Type Feature SetInactiveIfNoActiveAssignment (7) is active
AND there is no valid Resource Assignment for Identity (valid by ValidFrom/ValidTo dates)
OR CoreIdentity is not in State Active (1)
If the Identity activity flag is changed there is a event thrown. It may be UserAccountActivated or UserAccountDeactivationRequested event.
(write about _identityStrategyExecuter.ExecuteAfterAttributeValueChangeStrategies)
(fasttrackes)
Anonymization
Works on identites found in Anonymization Workitems
...