Why is a User Record Active, but also Locked Out?

jrusso
Tera Expert

I have a user who could not access ServiceNow.  When I looked at their User Profile, it was marked Active, but also Locked Out.  We use Workday Integration to update users, and both their User Profile and HR Profile were in order, except for the Locked Out checkbox being checked. 

How/why does this locked out box get checked, if we didn't manually do it?  I searched the documentation, but it mostly talks about setting a user record to locked out, not how the system may do this.  We use SSO to access ServiceNow, so I know the person is not trying to login unsuccessfully.

Is there an OOB business rule or something that may have caused this?

Is there a log that I could review to see when (and maybe why) the user record become locked out?

 

Thanks

John

2 REPLIES 2

sachin_namjoshi
Kilo Patron
Kilo Patron

Check any business rule on sys_user table which is updating locked out flag.

 

Also, check for any LDAP transform map , transform script on sys_user table which is updating locked out flag on user record.

 

Regards,

Sachin

Thanks for the suggestion.  I did find a couple of BRs on the sys_user table and will explore further.