Actions
Task #1298
closed
Merge strategy does not support change of value for system
Start date:
10/08/2018
Due date:
% Done:
0%
Estimated time:
Owner:
Description
Common usecase with managing AD groups is, that we support change of group DN on system. DN is synchronized by system for groups synchronization.
This DN is provisioned in memberOf attribute to users.
Current merge strategy does not support DN change, because new value is not in users provisioning history.
For example if group DN is changed, then deleting relevant role from user will not remove his group on AD.
This can also easily happen on other systems.
We need to discuss possible solutions.
Related issues
Actions