How to automatically extend User Accounts with ExtendLife

eADM includes a feature to automatically extend the lifespan of user accounts beyond their formal end date in the HR system. This is managed by the ExtendLife attribute.

Note: This feature must be activated by Identum support or your local Identum partner. Please contact us to enable it for your environment.

When this function is active, a user account remains enabled in eADM and all connected target systems, even after the user is registered as terminated in the source system. The account is deactivated only when the date specified in the ExtendLife attribute has passed. This provides a method to keep accounts active for a grace period.

Warning: During this extension period, the user account retains all the rights and group memberships it had at the last update from the HR system.

How it Works

When an employee's contract ends in the HR source system, eADM's standard lifecycle process would normally identify the user for deactivation. If the automatic extension feature is enabled, eADM performs the following steps instead:

1. Postpone Deactivation: The immediate deactivation of the account is halted.

2. Calculate New End Date: A new, future deactivation date is calculated based on the configured extension period (e.g., 30 days).

3. Update the ExtendLife Attribute: The new date is automatically populated in the ExtendLife field on the user's account.

The user account will then be visible in eADM with an active status and a date value in the ExtendLife field.