Deleting IDM user accounts during reconciliation

Question

Hello All,
We have an authoritative data source which is a MySQL database. I have loaded all the users from the DB into IDM. What I want to know is can we delete the user in IDM when the user account is deleted from the MySQL database?
How can I achieve this during reconciliation?
Any help would be highly appreciated.
Thank you very much.
Vamsi

Answer 1

I think you need to use the per account workflow, which is part of the recon policy. It should be something like:
<Extension>
<WFProcess name='UC2 ORA Per Acct Workflow' title='UC2 ORA Per Acct Workflow'>
<Variable name='userName' input='true'/>
<Variable name='accountId' input='true'/>
<Variable name='loginApplication' input='true'/>
<Variable name='resource' input='true'/>
<Activity id='0' name='start'>
<Transition to='Sync Attributes'>
<eq>
<ref>initialSituation</ref>
<s>AR_SITUATION_NAME_UNMATCHED</s>
</eq>
</Transition>
<Transition to='Deprovision User'>
<eq>
<ref>initialSituation</ref>
<s>AR_SITUATION_NAME_DELETED</s>
</eq>
</Transition>
<Transition to='Disable User'>
<eq>
<ref>initialSituation</ref>
<s>optional logic here</s>
</eq>
</Transition>
<Transition to='Clear Task Results'/>
<WorkflowEditor x='38' y='177'/>
</Activity>
<Activity id='1' name='Sync Attributes'>
<Variable name='WF_ACTION_ERROR'/>
<Variable name='user'/>
<Action id='0' name='Checkout User' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='checkoutView'/>
<Argument name='type' value='User'/>
<Argument name='id' value='$(accountId)'/>
<Argument name='authorized' value='true'/>
<Argument name='Form' value='UC2 ORA Per Acct Form'/>
<Variable name='view'/>
<Return from='view' to='user'/>
<Return from='WF_ACTION_ERROR' to='ERROR'/>
</Action>
<Action id='1' name='Checkin User Object' application='com.waveset.session.WorkflowServices'>
<Condition>
<isnull>
<ref>WF_ACTION_ERROR</ref>
</isnull>
</Condition>
<Argument name='op' value='checkinView'/>
<Argument name='view'>
<ref>user</ref>
</Argument>
</Action>
<Transition to='Clear Task Results'>
<isnull>
<ref>WF_ACTION_ERROR</ref>
</isnull>
</Transition>
<Transition to='end'/>
<WorkflowEditor x='259' y='7'/>
</Activity>
<Activity id='2' name='Deprovision User'>
<Variable name='WF_ACTION_ERROR'/>
<Variable name='user'/>
<Action id='0' name='Checkout User' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='checkoutView'/>
<Argument name='authorized' value='true'/>
<Argument name='type' value='Deprovision'/>
<Argument name='id' value='$(accountId)'/>
<Variable name='view'/>
<Return from='view' to='user'/>
<Return from='WF_ACTION_ERROR' to='ERROR'/>
</Action>
<Action id='1' name='Select All Accounts for Deprovision'>
<expression>
<set name='user.resourceAccounts.selectAll'>
<s>true</s>
</set>
</expression>
</Action>
<Action id='2' name='Checkin User Object' application='com.waveset.session.WorkflowServices'>
<Condition>
<isnull>
<ref>WF_ACTION_ERROR</ref>
</isnull>
</Condition>
<Argument name='op' value='checkinView'/>
<Argument name='view'>
<ref>user</ref>
</Argument>
</Action>
<Transition to='Clear Task Results'>
<isnull>
<ref>WF_ACTION_ERROR</ref>
</isnull>
</Transition>
<Transition to='end'/>
<WorkflowEditor x='308' y='241'/>
</Activity>
<Activity id='3' name='Disable User'>
<Variable name='WF_ACTION_ERROR'/>
<Variable name='user'/>
<Action id='0' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='disableUser'/>
<Argument name='accountId' value='$(accountId)'/>
<Argument name='doWaveset' value='true'/>
</Action>
<Transition to='Clear Task Results'>
<isnull>
<ref>WF_ACTION_ERROR</ref>
</isnull>
</Transition>
<Transition to='end'/>
<WorkflowEditor x='390' y='387'/>
</Activity>
<Activity id='4' name='Clear Task Results'>
<Action id='0' application='SET_RESULT_LIMIT'>
<Argument name='limit' value='0'/>
</Action>
<Transition to='end'/>
<WorkflowEditor x='351' y='104'/>
</Activity>
<Activity id='5' name='end'>
<WorkflowEditor x='691' y='50'/>
</Activity>
</WFProcess>
</Extension>
Reg/Suveer