LDAP extraction
Implement an LDAP extraction process to detect inactive users.
To detect inactive users using LDAP extraction, create a separate LDAP data source scoped specifically to inactive user accounts. For example, target a inactive users organizational unit (OU) or apply a query filter that matches
inactive account flags. In the Table Transform Map for that data source, add a transform script that sets target.active = false for each record. Because the data source returns only inactive users, the script
deactivates only those accounts in ServiceNow.
Benefits
Benefits to this method include:
- Simple scripting
- Existing user records aren't involved in processing
- Inactive users aren't loaded into a temporary import table
- No performance impact
Drawbacks
Drawbacks to this method include:
- An additional process is created
- The extract set must be placed in a location where your data source can access it