IPA "cookbook" solution to suspend non-payroll personnel security rights during a payroll run

During our Infor V10 education (IPA, Landmark admin, LSF admin) they all alluded to this IPA "cookbook" example that was out on Xtreme to "lock down" security temporarily during payroll runs to keep Employee Self service from updating ACH, or Benefits to modify plans during payroll program runs.

I have not been able to locate this article/guide/cookbook, and the Infor educators have not responded to my inquiries about it. I've been searching for it. So my question is, #1 does anybody in this group know of its existence, and #2 where would it be?

Thanks!

Find more posts tagged with

Process Automation (IPA) - General Discussions

Comments

Robert Canham

I'm not sure about any cookbook, however, if you're on a current release of 9.0.1 or on version 10, this functionality is built into the application for tax withholding, addresses, and direct deposit updates. The setup is done on the HS18 and you define when the users will be locked out of those tasks.

Legacy Contributor

Thanks for that quick response. This would have been a bit more encompassing, such as also limiting other job activity and such that might compete with system resources during that time frame. I did not know of that other built in functionality, though, thanks for letting me know.

suryaprakash-mallareddy

In S3, there's a setting in emss_config.xml under /env/law/webdocs/lawson/xhrnet/xml/config, there's a section for payroll lockout in newer versions of S3 (9.0.1.9 or higher including 10.0.1):



<setting id="payroll_lockout" value="true"/>

From there, there's set-up that has to be done on HS18 such as identifying the periods to lock. I don't know if there's another way to do this through an IPA. I haven't gone through the LSF Admin training for V10. I just found this stuff poking around, so I don't know if there's anything else. I hope that this helps.

Legacy Contributor

The process that was mentioned in the training was mentioned whenever we talked about Automated security tasks (federation, LDAP) or when reviewing security system (ISS) classes, roles, etc. So it was more of IPA working within the security system itself to disable (temporarily) or disconnect security elements to nullify their authority until put back in place.

At least now I don't feel so foolish about not being able to find it.. It doesn't seem like an obvious topic around here.

Copyright © 2025 Infor. All rights reserved.