IdStory Identity Manager

When synchronizing roles, please add an option to not activate the option "Automatically create accounts" for the synchronized roles.

• AD groups are synchronized to IdM as roles for handling group membership
• We have one main "login role" which creates accounts. We don't want other AD roles to create accounts automatically (=> they must be "no-login" roles)

This option should be similar as e.g. "Enable forward provisioning" specific settings of the role synchronization.
After that, the wizard for AD groups should also prepare this advanced feature https://wiki.czechidm.com/devel/documentation/wizards/ad_group#attributes