<div dir="ltr"><div dir="ltr">If you want to use both, within your default user template just add a few mappings, It will set administrativeStatus and effectiveStatus based on validTo/From values.<div><br></div><div>see attached<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><br></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 21, 2019 at 9:57 AM Oleksandr Nekriach <<a href="mailto:o.nekriach@dynatech.lv">o.nekriach@dynatech.lv</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi Ivan,</div><div>You absolutely right, my issue has been connected with administrativeStatus so it should be "Undefined" to make validTo field works.</div><div><br></div><div>Best regards,</div><div>Oleksandr<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 21 Jun 2019 at 11:21, Ivan Noris <<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF">
<p>Hi Oleksandr,</p>
<p>please check the following:</p>
<p>in user XML data, check the whole <activation> container.</p>
<p>Check the values of administrativeStatus and effectiveStatus.</p>
<p>The help probably means this: the effectiveStatus is computed
from administrativeStatus, validFrom and validTo. If
administrativeStatus=enabled, validFrom/validTo have no influence.
administrativeStatus always wins.</p>
<p>If you want to use validFrom/validTo, then administrativeStatus
should be set to undefined.</p>
<p>Please try and let us know.</p>
<p>Regards,</p>
<p>Ivan<br>
</p>
<div class="gmail-m_7971901458505381536gmail-m_2527321100164885398moz-cite-prefix">On 21. 6. 2019 9:06, Oleksandr Nekriach
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hi all,</div>
<div>The date in the past in "Valid to" field does not
deactivate users since upgrade from 3.7.2 to 3.9 version no
more. I see in the user history<span id="gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-idfa6"> recompute</span>
event and <span>Validity Status has been changed from IN to <span>
</span> <span>AFTER</span> <span></span></span>but nothing
happens and the user still remains in Enabled status.</div>
<div>I see in help "Not applied if the enabled" flag is set to
any value" and I can't understand what it means.<br>
</div>
<div>What I have missed, please help?<br>
</div>
<div> <br>
</div>
<div>Version 3.9.1-SNAPSHOT<br>
Git describe git-v3.9support-132-gd86f841<br>
ConnId framework version 1.5.0.10<br>
Tomcat 8.5.23.0<br>
java.version 1.8.0_151</div>
<div>
<table class="gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-m_8971489514046996825gmail-table gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-m_8971489514046996825gmail-table-striped gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-m_8971489514046996825gmail-table-word-break">
<tbody>
<tr>
<td class="gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-m_8971489514046996825gmail-col-xs-3"><br>
</td>
<td class="gmail-m_7971901458505381536gmail-m_2527321100164885398gmail-m_8971489514046996825gmail-col-xs-9">os.arch
amd64<br>
<a href="http://os.name" target="_blank">os.name</a>
Linux</td>
</tr>
</tbody>
</table>
</div>
<br clear="all">
<br>
-- <br>
<div dir="ltr" class="gmail-m_7971901458505381536gmail-m_2527321100164885398gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><span style="color:rgb(76,76,76)">Best
regards, <br>
<br>
<img src="cid:16b7a85dddea4b250af1"> <br>
<br>
Oleksandr Nekriach | Identity and access management
engineer <br>
<br>
Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">Jeruzalemes iela 1, Rīga,
LV-1010, Latvia</a><br>
<br>
<div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>
,
<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>
|
<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div>
<br>
<br>
Stay connected: <br>
<div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:16b7a85dddfa4b250b02"></a></div>
<div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:16b7a85dddfa4b250b13"></a></div>
<br>
<br>
<span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential
information and is intended only for the named
recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities
with this information. If you have received this
transmission in error, please notify us by e-mail
immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information
could be intercepted, corrupted, lost, destroyed,
arrive late or incomplete, or contain viruses.</span></span></div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="gmail-m_7971901458505381536gmail-m_2527321100164885398mimeAttachmentHeader"></fieldset>
<pre class="gmail-m_7971901458505381536gmail-m_2527321100164885398moz-quote-pre">_______________________________________________
midPoint mailing list
<a class="gmail-m_7971901458505381536gmail-m_2527321100164885398moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="gmail-m_7971901458505381536gmail-m_2527321100164885398moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="gmail-m_7971901458505381536gmail-m_2527321100164885398moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail-m_7971901458505381536gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">Jeruzalemes iela 1, Rīga, LV-1010, Latvia</a><br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote></div></div>