I want to find a way to make Identity Policies which are not based on disabled state attribute value and sets the Provisioning state attribute of a user to Active, Inactive, Locked , suspended or deprovsioned.
Can we have a combination based on FTE value along with something other attribute apart from disabled state which can be used to set the Provisioning state of the user in IM
I don't really understand what you are wishing to do. Could you try to explain it in more details?
In addition, I am also having a hard time understanding what issue you are trying to resolve here. We would need more details on this to help troubleshoot you. If possible, a screenshot or addition details would help with this.
If I were to guess, is it that you would like to focus on a attribute to see if it's in disabled state? If so, set an attribute to one of these values Active, Inactive, Locked , suspended or deprovsioned state?
That would mean that if the user is disabled you want to be able to put in enabled state if it is active? The others inactive, locked, suspended or deprovisioned seem like it would still stay in disabled state.
Very sorry guys not putting it in the right way.
I will try to reframe it:
Today we have on the user profile an attribute called Provisioning state which has values Active, Inactive, Locked , suspended or deprovisioned.
These values are calculated on BULK import via Identity Policy which checks the user %enabled_state%, but we want to remove the dependency on the %enabled_state% to set the value Active, Inactive, Locked , suspended or deprovisioned.
Is there any other way like start date end date checks or any other?
This is still not clear to me. Perhaps you are best with opening a support case and sharing screenshots and current configuration.