Revoking Connections

By default, the RACF connector automatically removes a user's connection when they are disconnected from a group. You can configure the connector to revoke connections instead of removing them.

Add the following parameter to the application debug page:

<entry key="updateRevokeAttrOnConnection" value="Y"/>
Add the REVOKED attribute in the splConnectionAttributes:

<entry key="RU_SUSPENDED" value="false"/>

If a user initiates a disconnect operation from a group, the connector will now send a command to revoke the connection's attributes instead of completely removing the connection. For user-to-group connections, if the connection is currently in a revoked state, it will be resumed; otherwise, a new connection will be created.

Feedback is provided as an informational resource only and does not form part of SailPoint's official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.

Revoking Connections

Documentation Feedback