Hi all,
I am currently struggling with deprovisioning in FIM and was looking for some help.
My scenario - I am receiving users from an "HR" database and if they have the employee type of "Full Time" or "Contractor" they automatically get provisioned into the AD via set transition and synchronisation rule. The
DN for the user is built based upon the employee type therefore full time employees go into on OU, contractors into another. This works and all is good - I can even change the type of employment and the user gets moved as expected.
Now I need to deal with the scenario of deprovisioning. The HR database has no state information - a user is either present in the database or not. When a user disappears from the database I would like to first disable the account in AD, move it to a third "Disabled" OU and then stop managing the user in FIM.
I have done lots of reading around the subject including the "Understanding Deletion in ILM 2007" and others. What I can't figure out is which bits I need to put together and in which order.
Some guidance would be brilliant.
Thanks in advance and here is hoping someone has some patience to help :-)