Planned Leaver Events (Advanced Termination)

EmpowerID allows organizations to automate the disabling and eventual deletion of EmpowerID Persons and all user accounts linked to those Persons based on the value of the ValidUntil attribute set on those Persons. This type of termination automation, known as the "Advanced Leaver" or "Planned Leaver" event, differs from unplanned Leaver events, which an administrative user typically performs via the EmpowerID web user interface.

Configuring EmpowerID to implement planned Leaver events involves the following tasks:

• Creating an EmpowerID Person as the TerminatePerson Advanced Workflow Initiator – The EmpowerID system uses this workflow to terminate all people submitted. As a best practice, the Person account you use should not belong to an actual EmpowerID user.

• Configuring Planned Leaver System Settings – These settings allow you to select the Person Object responsible for initiating the TerminatePersonAdvanced workflow and customize other settings involved in the advanced termination process.

• Enabling the SubmitPersonTerminations permanent workflow – When enabled, this workflow runs in a continuous loop, executing once every five minutes to terminate all people with a ValidUntil expiration that has passed the number of days specified by the PersonTerminationGracePeriod system setting.

Create the TerminatePersonAdvanced workflow initiator

1. On the navbar, expand Identity Administration and click People.

2. Click the Create Person Simple Mode action. 
   This opens the Create Person Request form.
   
   

   Open

   

   
   
   

3. Fill in the fields of the form with the following information:

   • First Name and Last Name – Enter the first and last name of the Person you are creating. It is recommended that you choose a name that identifies the purpose for this person, such as "Planned Leaver" or something similar.

   • Email – Optional

   • Personal Email – Optional

   • Primary Role and Location – Below Primary Business Role and Location, click the Select a Role and Location link, and in the Role and Location Selector that opens, do the following:

     • Search for and select the appropriate Business Role for the person.

     • Click the Location tab.

     • Search for and select the EmpowerID Location for the person.

     • Click Select to close the Role and Location Selector.

   • Manager – Optional

   • Comments or Justification – Optional

4. Back in the main form, click Save. 

5. On the View Person page that appears after EmpowerID creates the person, click the Access Assignments accordion to expand it and then select Direct from the Assign direct to resource or other method? drop-down.

6. Click the Add New  button on the grid header and in the Select the resource(s) to grant access to dialog that appears do the following:

   1. Select workflow from the Resource Type drop-down.

   2. Enter TerminatePersonAdvanced in the Enter a Workflow Name to Search field and then click the tile for that workflow to select it.

   3. Select Initiator from the Access Level drop-down.

   4. Click Save.

   5. Close the Select the resource(s) to grant access to dialog.

7. Click the My Cart icon at the top of the page, enter a reason for the access assignment, and click Submit.

Configure Planned Leaver Settings

1. On the navbar, expand Identity Lifecycle and click Settings.
   This directs you to the Edit page for the Account Inbox Settings.
   
   

   Open

   

   
   
   

2. Select the Leaver tab and adjust the settings as needed.
   
   

Enable the TerminatePersonAdvanced workflow

1. On the navbar, expand Infrastructure Admin, then EmpowerID Servers and Settings, and click Permanent Workflows.

2. On the Permanent Workflows page, click the Submit Person Terminations link to open the Details page for the workflow.
   
   

    

3. From the Permanent Workflow Details page, click the Edit link. Edit links have the Pencil icon.
   
   

    

4. Select Enabled and then click Save.