Is it possible to disable active accounts but not enable disabled account

We want to setup the Enable Account mapping so that if an employee is terminated and their account is active, then the account is then disabled.

However, if they are Active and their account is in a disabled state, then we do not want the app to enable the account.

Essentially we never want the app to enable accounts, only disable.

Yes this can be done using a conditional expression on the Enable Account mapping.

First you will check if the AD account is in a enabled or disabled state and then determine the action to take as shown below:

If the user is currently disabled and they are no longer Active in UKG, disable them
User.Enabled && Employment.EmployeeStatusCode != ‘A’

Ignore everybody else