CA IdentityMinder can be configured on an endpoint-by-endpoint basis, so accounts on an endpoint are not deleted when administrators initiate delete or synchronization actions that would typically delete the accounts. Instead, the accounts are placed in a Delete Pending state in the User Console and in a Suspended state on the managed endpoint. CA IdentityMinder also removes all account templates from the suspended accounts and clears any multi-valued capability attributes on the suspended accounts.
Delete Pending accounts can be identified in the Provisioning Manager on the Statistics tab of the account properties. A suspended account has a suspend reason of Delete Pending and a timestamp when it entered this state. The storing of the Delete Pending status and Suspended timestamp permits the writing of a utility that identifies these Delete Pending accounts and deletes them from the Provisioning Server and the managed endpoint later.
Copyright © 2013 CA.
All rights reserved.
|
|