Provisioning
The Windows Local connector supports provisioning, allowing you to create and manage accounts and entitlements in Windows Local directly from SailPoint.
Prerequisite: Your system is configured for provisioning.
When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.
For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.
Important
This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.
Default Create Account Attributes
| Account Attribute | Generator | Description |
|---|---|---|
| sAMAccountName | Create Unique Account ID | The name for the user account to create. If the Disable Qualifying Local Objects checkbox in the source configuration is not selected, the format for the sAMAccountName is hostName\UserName. If it is selected, the format for sAMAccountName is userName. |
| Password | Create Password | Password for the new user account |
| Description | Static | Description of the new user account. By default, the value is <Empty String>. |
| FullName | Static | Full name of the user account. By default, the value is <Empty String>. |
| Disabled | Static | Option to create a disabled user account. By default, the value is false. |
| PasswordExpired | Static | Attribute to indicate whether the user must change their password on the next logon. By default, the value is true. |
| PasswordUnchangeable | Static | Attribute that indicates whether the user is allowed to change their password. If the value is false, the user can change the password. If it is true, only the system administrator can change it. By default, the value is false. |
| PasswordNeverExpires | Static | Attribute to indicate that the user account password never expires until the next password is set. |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.