Using DFS for user and group management

Hi,

Does anyone has tried to use DFS for group management or user management -if feasible at all-? Any pitfalls, recommendations? The use case is that an identity provisioning system triggers that employees are added in particular groups depending on their organisation, role, location, training etc. Obviously interfacing from\to external systems is preferred using WS instead of propriety DFC or creating our own WS wrapper around DFC.

regards,

Mark

Find more posts tagged with

Comments

agoodale

You can do it with the ObjectService. Since dm_user and dm_group are standard persistent types, the ObjectService can manipulate them at the attribute level. There was a bug with DFS 6.5 whereby getting i_all_users_names would cause an exception, but it should be fixed in 6.5sp3 or 6.6.

Good luck!