Authentication provider users synchronization alerting

A fix for this issue has been implemented in version 2025.3.10.0
Implemented

Authentication provider users synchronization alerting

avatar

Devolutions PAM is alerting many, many times when a user that's synced is disabled. It's sending the following alert:

Hi x,

This is to notify you that an Services/Authentication provider synchronization related action has occurred on Devolutions Server.

Authentication provider users synchronization succeded with warnings
6/16/2025 3:15:05 AM CEST

Message:
username: lblDisabled

In one weekend we received about 100 emails about this user. There should only be one alert about this.

Can this be fixed?

All Comments (7)

avatar

Hello,

Thank you for reaching out to us regarding this matter. I understand that you do not want to be bothered by an account that is already disabled because you already know the sync will fail. The only way to avoid this for now is to disable all heartbeat failures in your notification preferences. However, this also means that you could miss some important alerts. I know it is not the best solution for now.

In your situation, I understand you have a disabled account with your provider, and it is "normal" if it is not synchronized. Am I correct? Do you expect that account to be reenabled soon? I'm just curious to know why you have such an account in your PAM that you know will never be synced for a long period. We are looking to solve that issue, but please, let me know more about your context and why you get those alerts. We will see how we could improve our application to avoid unnecessary alerts.

Best regards,

François Dubois

avatar

Hi François,

In this case the person stopped working at our company. At the moment the employee has the last working day the acount will be automatically disabled and after a certain time period the account will be automatically deleted.

So this is normal behavior.

avatar

Hello,

Thank you for your answer. If my understanding is correct, the PAM account will be deleted only when the account is automatically deleted by the provider, am I right? Do you have automation that will delete the PAM account in DVLS, or will it be manual? Would it work for you if we send an alert only once and a new alert is sent again only if a sync is successful and fails again?

Best regards,

François Dubois

avatar

Hi François,

The "normal" Active Directory account will be deleted automatically, the PAM Active Directory account wil be manually deleted in Active Directory and DVLS (we have our own monitoring of these accounts within Active Directory).

Your sugestion will work for us!

avatar

Hi,

Can you give a statusupdate about this? We still have this problem.

avatar

Hello,

We have not worked on that yet, but I'm increasing the priority since I understand it can be annoying to receive all those emails. We will post back here once we have an update.

Best regards,

François Dubois

avatar

Hello,

Thank you for being so patient!

I am pleased to inform you that the issue has been resolved in the latest Devolutions server version (2025.3.10.0):
https://docs.devolutions.net/server/getting-started/installation/upgrade-server

We also recommend that you first perform the update in a staging/test environment:
https://docs.devolutions.net/server/kb/how-to-articles/create-server-staging-instance

Since this is resolved, I will mark this thread as resolved. If the problem persists, please let us know.

Best regards,

Maxim Robert

A fix for this issue has been implemented in version 2025.3.10.0