Contact status (i.e. enabled, disabled) is not shared between Active Directory endpoint and Identity Manager in an Explore and Correlate

Document ID : KB000010803
Last Modified Date : 14/02/2018
Show Technical Document Details

When running an Explore and Correlate between an Active Directory endpoint to Identity Manager, users are successfully built, but the status of those users is not included in the new user.  For example, if the user is disabled on Active Directory, that user should be built in Identity Manager as "disabled".


To enable the status sharing from the Active Directory Endpoint to Identity Manager Provisioning Server:

Open Provisioning Manager > Endpoints > Active Directory > Attribute Mapping > Use Custom Settings > Set default > Add > map GlobalUserStatus - Status > Run explore and correlate. 

To enable the status sharing from Identity Manager Provisioning Server to the Active Directory Endpoint:

Open Identity Manager management console > Environments > Advanced Settings > Provisioning > Confirm "Attribute Mappings" %ENABLED_STATE% is set to %ENABLED_STATE%.