Sun Identity Manager Service Provider 8.1 Deployment

Deprovision View

The Identity Manager deprovision view has a complex structure designed for use with interactive forms. The three operations that may be requested through this view are:

unassign. Removes the assignment and deletes the account.

unlink. Removes the account link without deleting.

delete. Deletes the account, but leave the assignment.

In the IDMXUser view, you perform an unassign simply by removing a name from the roles, resources, or applications lists.

To perform an unlink, you may remove an object from the sys.links list, or set the following action attribute to true:

objects[].sys.unlink

To perform a delete without unassigning set the following command attribute to true.

objects[].sys.delete

To delete the directory user, set the following attribute to true:

sys.delete