Hi Experts,
We have done a LDAP group provisioning from GRC and this is feasible if both the LDAP ID and SAP ID are same.
But we have different scenario where LDAP ID & SAP ID are different, then how can we do this?
Below is the sample scenario:
When a new user joins the organization, then his LDAP ID will be created in LDAP.
So while raising the request in GRC based on the user first name and last name we can pull other details of the user.After getting the details we are auto generating the user ID and this will be users SAP ID.
Requester will select the business role and submit the request, this business role also contains groups related to LDAP.
My query here is....as request is headed by SAP ID and while provisioning to LDAP,how GRC will recognize user's LDAP ID based on the auto generated SAP ID and provision the groups?
AND After provisioning
1. SAP ID should go &sit in the custom attribute defined in LDAP (custom variable is available in LDAP to maintain SAP ID, this is currently mapping manually))
2. LDAP group provisioning
please provide your valuable suggestions on this scenario
Thanks,
Sriram
