Darkmon - Generic User Action

Provider-agnostic user-action dispatcher (disable, reset password, revoke sessions). Reads "Darkmon - Identity Provider" List for the configured directory (ad | okta | azuread) and routes to the matching command.

Darkmon · 10 tasks · 3 inputs · 0 outputs

Inputs

  • Username — The directory username (sAMAccountName / UPN / login) to act on.
  • Action — One of disable | reset-password | revoke-sessions.
  • NewPassword — Required only when Action is reset-password.

Flowchart

ad okta azuread disable reset revoke Start Start Provider switch Provider switch AD action switch AD action switch Okta: deactivate user Okta: deactivate user Azure AD: disable user Azure AD: disable user AD: disable account AD: disable account AD: force password change at next logon AD: force password change... AD: revoke Kerberos tickets AD: revoke Kerberos tickets Fallback: log unsupported request - PrintErrorEntry Fallback: log unsupported... PrintErrorEntry Done Done