Create Incident if inactive User tries to login

[Dominik9]

Hi experts

We have enabled the "Auto Provisioning User" for our Azure Identity Provider which automatically creates users when they log in for the first time. Now we want to set "Locked Out" to "True" for users who have not logged in for 3 months. After another 3 months we want to set "Active" to "False". If these users try to log in again, an incident should be created.

But now the situation is that when a user tries to login that is inactive, the system tries to create a new user. How can I catch this so that it doesn't try to create a new user, but realizes that there is already a user who is simply inactive?

Users that are locked out but active are detected and we can catch this directly in the transform map script. Unfortunately, this does not work for inactive users.

Does anyone have an idea?

Thanks

Dominik

[Praveen Tripath]

In Servicenow there is a functionality by which the User access auto deactivated if user seems off or Inactive from past 90 days. 

[Dominik9]

Hi Praveen 

Thank you for your respond.

This is not our problem. Our problem is that the SSO tries to create a new user if an inactive user tries to login. But we would like the system to create an incident in this case. 

Regards
Dominik