Function (Task feature)Name

Description

Create / delete identitiesCreate/delete identities in

If enabled, identities for that target system will be calculated and created within the CoreOne Suite. Attributes must be checked for uniqueness (locally, i.e. in the COS and in the real target system)

Provisioning identities 

Provision identities in If enabled, identites will be provisioned to the target system.

Update identities          

Updating identities and the associated attributes in the CoreOne SuiteIf enabled, identites will be updated within the CoreOne Suite.

Provisioning identity updates   

Provisioning If enabled, calculated changes to identities and the associated attributes in the will be provisioned to the target system.

Deprovision identities  

Deprovision identities If enabled, identities will be deprovisioned in the target system if their life cycle has ended.

Cleanup of inactive identities active     

Deactivates identities that did not login to the system after a certain time period. The period is configurable on the task definition. Defaults to 60 days.

Check password changed active

Deactivates identities that did not change their password after the creation of the account within a certain time period. The period is configurable on the task definition. Defaults to 24 hours.

Function (task feature)Name

Description

Create/delete resourcesCreate or delete

a managed resource in If enabled, managed resources for that target system will be calculated and created within the CoreOne Suite.

Provision resources     

Provisioning a managed resource in If enabled, managed resources will be provisioned to the target system.

Update resources         Update managed

resource in the CoreOne Suite   If enabled, managed resources will be updated within the CoreOne Suite.

Provisioning resource changes 

Provisioning If enabled, calculated changes to managed resources in will be provisioned to the target system.

Deprovisioning resources         

Deprovision If enabled, managed resources will be deprovisioned in the target system if their life cycle has ended.

Provisioning resource allocations         

Provisioning If enabled, resource allocations will be provisioned in the target system (linked resources)

Deprovisioning resource allocations     

Deprovision If enabled, resource allocations will be deprovisioned in the target system (linked resources)

Provisioning resources-resource allocations     

Provisioning If enabled, resource to resource allocations will be provisioned in the target system

Deprovisioning resource resource allocations   

Deprovision resource assignments If enabled, resource to resource allocations will be deprovisioned in the target system

Deactivate deprovision prevention for prolonged resource assignments

If enabled, deactivates the deprovision prevention for resource assignments that could be deprovisioned unintentionally. If this feature is deactivated, the resource assignment are protected from deprovisioning too early if there are other, valid resource assignments for the same resource.

This feature is a preview flag for an improvement. It will be removed in a future version. In general, this feature should not be enabled.

Function (task feature)Name

Description

In the should-actual Log available    

Log is available that tracks the expected values versus the actual results, allowing for comparison and review.

Should be - Actually is - cleanup

Compare the expected values with the actual state and ensure necessary cleanup actions are performed to maintain system consistency.

Read back account properties

Retrieve and verify the properties of the account to ensure they are accurately reflected in the system.

Resource identity member target system clean up

Ensure that the resource identity member information is properly cleaned up on the target system to avoid discrepancies

Resource resource member target system clean up 

Perform the necessary cleanup of resource memberships within the target system to maintain data integrity.