The CreatorCon Call for Content is officially open! Get started here.

Can ServiceNow user accounts be set to active/inactive based on active directory user enabled/disabled?

Rick Angel
Kilo Explorer

‎03-09-2018 09:27 AM

Is it possible to control when a ServiceNow user account is set to Active or Inactive based on the AD user setting for enabled/disabled?  Often we pre-create users in AD a few days before they actually start since they are fed automatically from our HR system into AD.  Those users are set to disabled.  On the start date they become enabled in AD.  But it seems that ServiceNow does not see that change on the AD account.  We use secure LDAP to feed AD changes into ServiceNow through a scheduled job daily.  Thanks! 

0 Helpfuls
  • 3,776 Views
7 REPLIES 7

Baltazar Indabu
Tera Contributor
In response to sk59

‎04-19-2023 10:19 AM

In our case we are adding the users on azure. to a security group that sincronize on Servicenow, so you can know when an user is ativated or inativated where the record is added or removed form the user group.

0 Helpfuls

Ian Mildon
Tera Guru
In response to sk59

‎04-19-2023 11:17 AM

Map the userAccountControl value from AD: if it's 512 then the account is active and if it's 514 the account is inactive.

 

I will say that this is a very basic view of all the available values for userAccountControl but they are the main two to be looking for.

0 Helpfuls