Typically, customers do not want to disable/de-provision resource accounts immediately after a user leaves an organization or changes job roles. In many cases, they may want to disable/de-provision the resource account after a certain number of days (i.e., a grace period). This grace period will vary depending on job role. Oracle Identity Manager doesn’t handle grace period scenarios out of the box. In the past, time-consuming and costly custom development was needed to manage the aging of accounts.
APTEC’s Grace Period solution, which utilizes Aging Rules, was developed to solve this problem and provide customers with an extensible, flexible way to enable users to easily configure roles and resources with grace period access.
APTEC’s Grace Period Solution also includes Grace Period Tracking, so all resource accounts that need to be aged are recorded with an expiration date. Once the expiration date is reached, the Grace Period Scheduler takes action on whether to disable/de-provision the resource account based on that record data.
To learn more about our Grace Period solution, please feel free to Contact Us for more information.