Skip existing Sign users that are excluded

Author: adorton-adobe

user_sync/engine/sign.py

@@ -153,9 +153,11 @@ def update_sign_users(self, directory_users, sign_connector: SignConnector, org_
         """
         # Fetch the list of active Sign users
         sign_user_groups = sign_connector.get_user_groups()
-        filtered_users = {user.email: user for user in sign_connector.get_users().values() if not self.sign_user_excluded(user, sign_user_groups[user.id], sign_connector)}
+        all_users = sign_connector.get_users().values()
+        filtered_users = {user.email: user for user in all_users if not self.sign_user_excluded(user, sign_user_groups[user.id], sign_connector)}
         sign_users = {user.email: user for user in filtered_users.values() if user.status != 'INACTIVE'}
         inactive_sign_users = {user.email: user for user in filtered_users.values() if user.status == 'INACTIVE'}
+        self.excluded_users = {user.email: user for user in all_users if self.sign_user_excluded(user, sign_user_groups[user.id], sign_connector)}
         self.sign_user_primary_groups[org_name] = {id: [g for g in groups if g.isPrimaryGroup][0] for id, groups in sign_user_groups.items()}
         users_update_list = []
         user_groups_update_list = []
@@ -175,6 +177,9 @@ def update_sign_users(self, directory_users, sign_connector: SignConnector, org_
                 assignment_group = self.default_groups[org_name].groupName
             user_roles = self.retrieve_admin_role(directory_user)
             if sign_user is None:
+                if directory_user['email'] in self.excluded_users:
+                    self.logger.debug("(%s) Found excluded user %s directory user list, skipping", org_name, directory_user['email'])
+                    continue
                 if sign_connector.create_users:
                     inactive_user = inactive_sign_users.get(directory_user_key)
                     # if Standalone user is inactive, we need to reactivate instead of trying to create new account