Overview

This use case describes how Manager or Security Manager can lock users all accesses to organizations applications. 

Operators

IGA solution
Self-Service Portal
Security Manager
Manager

Prerequisites

Lock user account service is published in the Self-Service Portal.

Result

Users IGA Identity Storage datacards is locked, IGA Account datacards are disabled, and user is not able to login to organizations network. After clearing situation with the user, Manager or Security Manager can request unlocking.

Operating chain

1. Manager or Security Manager opens "Lock User Account" service from the Self-Service Portal
   
   
2. Manager or Security Manager chooses Lock User check box
   
   
3. Manager or Security Manager chooses user from the list
   
   
   • Manager can only lock subordinates accounts
     
     
   • Security Manager can lock all users accounts
     
     
4. Manager or Security Manager chooses reason or fulfills mandatory justification and submits request
    
5. IGA solution receives information and starts workflows and provisioning
   
   
   • User's IGA Identity Storage data cards status is changed to locked if updates are coming during this time
     
     
     • Personal or Organizational information is not updated, unless IGA solution receives employment end date from the source system or from Self-Service Portal. 
       
       
       • If employment end date is received, IGA solution moves to update departing user information use case
         
         
   • IGA solution starts provisioning towards directories and/or applications 
     
     
     • Information is automatically updated to directories (via Efecte Provisioning Engine) or to applications (via integration)
       
       
     • IGA Admin Task or email is generated for removing manually added accesses
       
       
   • IGA solution informs via email Security Manager and user's Manager(s) 
     
     
6.  User's IGA account is disabled
   
   
7. If user's IGA Identity Storage datacard and IGA Accounts needs to be enabled
   
   
   • IGA solution waits employment end date from source system or from Self-Service Portal (Update User Information service)
     
     
   • Security Manager or Manager opens "Lock User Account" service from Self-Service Portal
     
     
     • Chooses Unlock user account option
       
       
     • Chooses user from the list  
       
       
     • Fulfill mandatory justification
       
       
     • Submits form
       
       
   • If Manager requests unlock, Security Manager needs to approve it
     
     
     • IGA solution generates approval request to Self-Service Portal
       
       
   • IGA solution receives information and starts provisioning
     
     
     • Users IGA Identity Storage status is changed to active
       
       
     • Users IGA Accounts are enabled and information is provisioned to directory or application
       
       
8. Access Right Records are saved and process ends.

Related datacards

IGA Identity Storage
IGA Service Request
IGA Account