Normally, setting persons to active/inactive is managed in the AD or HR system and handled in Identity Manager via the automatic import. Optionally, they can be available as manual processes.
Standard workflow
|
|
Actor |
Action |
Option |
Physical ID | Digital ID | Physical access |
|---|---|---|---|---|---|---|
|
1 |
Registration officer or Helpdesk |
In Identity Manager: Browses for the person and clicks Deactivate. |
- |
|
|
|
|
2 |
Identity Manager |
Sets person to Inactive, removes all roles. |
- |
|
|
|
|
3 |
Identity Manager |
Optionally, locks any connected cards. |
- |
|
|
|
|
4 |
Identity Manager |
Exports the card data to the PACS system. |
|
|
|
|
|
5 |
Identity Manager |
Locks any software tokens. |
- |
|
|
|
|
6 |
CA |
Revokes any certificates. |
- |
|
|
|
Technical references
|
Option |
Process |
|---|---|
|
Deactivate employee |
BaseProcDeactivateEmployee (see image) |
|
Deactivate contractor |
BaseProcDeactivateContractor |
|
Deactivate visitor |
BaseProcDeactivateVisitor |
|
Deactivate employee and physical IDs |
CCProcDeactivateEmployee |
|
Deactivate contractor and physical IDs |
CCProcDeactivateContractor |
|
Deactivate visitor and physical IDs |
CCProcDeactivateVisitor |
|
Deactivate employee and digital IDs |
PcmProcDeactivateEmployee |
|
Deactivate contractor and digital IDs |
PcmProcDeactivateContractor |
|
Deactivate visitor and digital IDs |
PcmProcDeactivateVisitor |