Appearance
identity.end-user.actor-binding.reconcile ​
Suspend Staff-actor end-user bindings that no longer pass eligibility (scheduled sweep)
Sweep active Staff-actor end-user bindings and suspend those failing eligibility E1-E5.
Scheduled every 15 minutes (cron */15 * * * *). Scoped to the run's organization when one is present, platform-wide otherwise. A paused actor (ACTOR_NOT_ACTIVE) and an unavailable evaluation (ELIGIBILITY_UNAVAILABLE) never suspend.
Inputs:
- organization_uuid: restrict the sweep (optional)
- dry_run: report without writing (optional, default false)
- limit: maximum bindings scanned (optional, default 5000)
Outputs (terminal state_data):
- scanned, suspended_count, eligible_count, paused_count, unavailable_count, suspensions [{end_user_uuid, staff_actor_uuid, identity_app_uuid, code, reason}], dry_run
Overview ​
| Property | Value |
|---|---|
| Workflow type | Atomic |
| Library | App-identity |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
organization_uuid | uuid | No | — | — |
dry_run | boolean | No | — | — |
limit | integer | No | — | — |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
scanned | integer | No | — | — |
suspended_count | integer | No | — | — |
eligible_count | integer | No | — | — |
paused_count | integer | No | — | — |
unavailable_count | integer | No | — | — |
suspensions | list | No | — | — |
dry_run | boolean | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
reason | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | execute | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | execute | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "identity.end-user.actor-binding.reconcile",
"initial_data": {
"organization_uuid": "value",
"dry_run": true,
"limit": 123
}
}