RapidIdentity Product Guide

Alternate Expire Action

This alternate action is used to bypass built-in RapidIdentity Portal logic and instead allow an arbitrary RapidIdentity Connect Action Set to provide Expire Sponsored Account functionality. RapidIdentity Portal performs the necessary authentication/authorization/validation on the request then invokes the pre-defined Action Set on the configured RapidIdentity Connect instance.

Without this alternate action enabled, RapidIdentity Portal will both disable as well as set the expiration date on the account. Therefore the RapidIdentity Connect Action Set is expected to perform both of these tasks at a minimum

Action Set Parameters
Table 335. Parameters

Parameter

Description

target_dn

The DN of the target of the operation (whose profile is being expired)

perp_dn

The DN of the perpetrator of the operation (who's performing the operation)

audit_event_id

An audit event ID which may be used to correlate any audit log events from invoked Action Set to the audit log event generated by the call to the RapidIdentity Portal API

record_string

A JSON object containing the expiration date attribute and its new value



Example

The following example shows a record_string value indicating that the expiration date attribute is idautoPersonEndDate and the new value should be 20110308191013Z

{"idautoPersonEndDate": "20110308191013Z"}

Action Set Return Value

{ "success": <boolean>, "message": <string> }

Table 336. Return Fields

Field

Description

Required

success

Whether RapidIdentity Portal should consider the action as successful

no, defaults to false

message

Optional message which will be passed through to the API response and ultimately to the UI.

no



Example

{"success": false, "message": "The operation failed because...."}

{"success": true, "message": "The operation was successful"}