← Back to plugin index

Lock Inactive Accounts Task
Description
Server task that checks all user accounts and locks the ones that have not been used for a configured amount of time.

The task looks at the latest successful login timestamp. If it is not empty and too far in the past (see configuration properties below), the account is locked. Login failures are not taken into account. Accounts marked invalid and accounts that are already locked are ignored.

This task publishes a "User Locked" event for each locked user.

Type name
LockInactiveAccountsTask
Class
com.airlock.iam.servicecontainer.app.application.configuration.task.LockInactiveAccountsTask
May be used by
Task Schedule
Properties
User Persister (userPersister)
Description
User persister plugin used to read user account data and lock it if necessary.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Active Directory Connector Cipher User Persister Combining Extended User Persister Combining User Persister Database User Persister Dummy Extended User Persister LDAP Connector LDAP User Persister Property User Persister
User Iterator (userIterator)
Description
The user iterator plugin used to iterate over all users.
Usually this is the same as the UserPersister.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Active Directory Connector Cipher User Persister Combining Extended User Persister Combining User Persister Database User Persister Dummy Extended User Persister LDAP Connector LDAP User Persister Property User Persister
Expiration Days (expirationDays)
Description
Amount of days an account may be unused before it is locked.
Attributes
Long
Mandatory
YAML Template (with default values) 

type: LockInactiveAccountsTask
id: LockInactiveAccountsTask-xxxxxx
displayName: 
comment: 
properties:
  expirationDays:
  userIterator:
  userPersister: