Maintaining correct account status in OIM during target reconciliation

Most out-of-the-box connectors are automatically maintaining the correct OIM target account status during a reconciliation phase. For instance, after a successful reconciliation, the status of the OIM representation of a disabled AD account will be “disabled”.

The standard mechanism is using a special process attribute: OIM_OBJECT_STATUS, a kind of pseudo-column which is not defined in the form, but is made available by OIM in the Reconciliation Field Mapping tab of the provisioning process.

All you have to do is to create the mapping between this OIM_OBJECT_STATUS pseudo-column and a Reconciliation Field resource attribute which must be populated by the reconciliation process with one of the following two values: “Enabled” or “Disabled”. Case is important.

The reconciliation field can have any name. It doesn’t have to be “Status”.

Here is the "documentation" about this feature.