Name

Description

Create / delete identities

If enabled, identities for that target system will be calculated and created within the CoreOne Suite.

Provisioning identities 

If enabled, identites will be provisioned to the target system.

Update identities          

If enabled, identites will be updated within the CoreOne Suite.

Provisioning identity updates   

If enabled, calculated changes to identities will be provisioned to the target system.

Deprovision identities  

If enabled, identities will be deprovisioned in the target system if their life cycle has ended.

Cleanup of inactive identities active     

Deactivates identities that did not login to the system after a certain time period. The period is configurable on the task definition. Defaults to 60 days.

Check password changed active

Deactivates identities that did not change their password after the creation of the account within a certain time period. The period is configurable on the task definition. Defaults to 24 hours.

Name

Description

Create/delete resources

If enabled, managed resources for that target system will be calculated and created within the CoreOne Suite.

Provision resources     

If enabled, managed resources will be provisioned to the target system.

Update resources         

If enabled, managed resources will be updated within the CoreOne Suite.

Provisioning resource changes 

If enabled, calculated changes to managed resources will be provisioned to the target system.

Deprovisioning resources         

If enabled, managed resources will be deprovisioned in the target system if their life cycle has ended.

Provisioning resource allocations         

If enabled, resource allocations will be provisioned in the target system

Deprovisioning resource allocations     

If enabled, resource allocations will be deprovisioned in the target system

Provisioning resources-resource allocations     

If enabled, resource to resource allocations will be provisioned in the target system

Deprovisioning resource resource allocations   

If enabled, resource to resource allocations will be deprovisioned in the target system

Deactivate deprovision prevention for prolonged resource assignments

If enabled, deactivates the deprovision prevention for resource assignments that could be deprovisioned unintentionally. If this feature is deactivated, the resource assignment are protected from deprovisioning too early if there are other, valid resource assignments for the same resource.

This feature is a preview flag for an improvement. It will be removed in a future version. In general, this feature should not be enabled.

Name

Description

In the should-actual Log available    

Log is available that tracks the expected values versus the actual results, allowing for comparison and review.

Should be - Actually is - cleanup

Compare the expected values with the actual state and ensure necessary cleanup actions are performed to maintain system consistency.

Read back account properties

Retrieve and verify the properties of the account to ensure they are accurately reflected in the system.

Resource identity member target system clean up

Ensure that the resource identity member information is properly cleaned up on the target system to avoid discrepancies

Resource resource member target system clean up 

Perform the necessary cleanup of resource memberships within the target system to maintain data integrity.