...

The process involves a few tasks and is illustrated by timeline below:

You can see what is the action taken by each step and also what is the Anonymization state that is set at the end of the step on Core Identity and Identity.

Step 2 - AnonymizationTask runs (first time)

Core Identity is filterd by:

• State - Deleted

• Anonymization State - AnonymizationNeeded

• No role/resource assignments are removed

  • find resource assignment that respect any of following conditions:

    • Ignore = true

    • AssignmentState is one of (Denied, Assigned)

  • find role assignment that respect any of following conditions:

    • Ignore = true

    • AssignmentState is one of (Denied, Assigned, PendingAssignment)

Changes that are done:

• Clear readonly_email

• Change Identities state to

  • PendingAnonymization is Identity is provisioned

  • HistoryAnonymizationNeeded otherwise

• Core Identity Attribute value anonymization

  • Clear readonly_used_value

  • Set serialized_value to NULL

  • Set explicit_serialized_value to

    • SerializedAnonymizationDefault from Core Identity Type Attribute Mapping

    • default C# value if SerializedAnonymizationDefault does not exist

      • in case of drop down - first drop down item

• History anonymization

  • Overwrite all entries for Module.DM.IdentityManagement.CoreIdentity with identifier of processed CoreIdentity with Anonymized with AnonymizationTask text

  • Core Identity Anonymization state changed to HistoryAnonymized

Step 3 - UpdateIdentityTask

Processes Identities in anonymization state AnonymizationNeeded. More in Update Identity Task

After processing Identity anonymization state is be changed to:

• AnonymizationStarted - when there are changes to be provisioned (has_changed in Identity Attribute Values)

• HistoryAnonymizationNeeded otherwise

Step 3B - ProvisionIdentityChangesTask runs

Provisiones Attribute Changes for Identity that is in anonymization state AnonymizationStarted.

After provisioning Identity anonymization state is changed to HistoryAnonymizationNeeded.

Step 4 - AnonymizationTask runs (second time)

Core Identity is filterd by:

• State - Deleted

• Anonymization State - HistoryAnonymized

For Identities in HistoryAnonymizationNeeded state:

• Overwrite all entries for Module.DM.IdentityManagement.Identity with identifier of processed Identity with Anonymized with AnonymizationTask text

• Clear old_serialized_value in Identity Attribute Value

• Sets Identity anonymization state to Anonymized

For Core Identities

• Set anonymization state to Anonymized if all Identities have Anonymized state too

Diagram

Maybe looking at the diagram will help to understand the timeline a bit better: