Here is a design issue that I am struggling with:
- I am using eDir an attribute for entitlement to be in AD. That
works fine. I also am using another eDir multi-valued attr to control
application assignments. I started off by having a rule for each
attribute hard coded. It turns out that there would be too many groups
to leave a hard coded design in place; just too messy. I am looking at
using a "For each" clause that reads a global config variable to map
attribute values to AD Group assignments; that way it is one piece of
code, and will execute for as many values it finds in the multi-valued
attribute. Anyone have any experience getting something like this to
work?
** - Just moved this post here from very recently closed 'catch-all' IDM
Forum **