Adventures in identity management
ILM works on a single object at a time, so it can be a little tricky if you want to make a decision based on other objects in your metaverse. It is, however, perfectly possible (though, I believe, officially discouraged) to run SQL queries against the metaverse table from your extension code.
I’ve just installed the SAP MA (also called the ERP MA) for the first time. As usual it took four times as long as seemed strictly necessary so, in this post, I shall summarise the steps I took to create a basic MA, able to import Users and Employees from SAP into ILM.
A truly effective IdM system should be able to tidy up user data as part of the user-decommissioning process. This might include zipping up home folders and, in the case of email, archiving mailboxes to something like a PST file. My old method of archiving mailboxes with Exmerge when disabling Exchange users won’t work with…