How to track "Date of Last user Login" across all provisioned systems ?

We all know how hard it is to track old users - in particular ones that have left and termination paperwork has not been completed (users such as contractors, service technicians etc)
Anyone think of a way where IDM could track the date/time of last login to each system that it has provisioned that user to ?
Maybe a new field per system eg LASTLOGIN<ECPxxx> which I can then view along with the User ID Alias ACCOUNT<ECPxxx> field and see ;
Which Systems the user has a login to
Date / Time of last login to these systems
Yes, it can be done manually by logging in to each to the systems and running SUIM, but I would hopping for an elegant solution as part of the IDM process.

Hi Phil,
getting the last logon date is dependent on the system to which you are provisioning userids. For some systems you might not be able to retrieve the last logon date at all.
We have implemented something like that in my previous project for Active Directory, because we needed to implement a custom password ageing functionality that disables accounts when the user does not change his password in time. For Active Directory you can check the lastLogon attribute or alternatively the accountExpires attribute.
Best regards
Holger

Similar Messages

  • How to determine Organizational Data based on User Login

    Dear all,
    How to determine organizational data based on user login in Activity transaction, currently org determination is happening after entering customer number in the transaction.
    We have used 'Responsibility' determination rule for this configuration. Now the requirement is to determine org data based on user login.
    In Org model we have assigned user to org data through a business partner. But still org data is not getting determined in the transaction.
    Please help me to trace out the problem.. your suggestions will be highly appreciated.
    Best regards
    Raghu ram

    You just have to use other organization determination rule. In your case this would be rule 10000194 (ORGMAN_12). This determination rule delivers the responsible organizational unit of the user
    User is defined as a business partner in the container attribute 'PARTNER'. If not, the system user (sy-uname) is used.
    So you have to do the following:
    - use this determination rule
    - in BP link username with employee
    - assign in PPOMA_CRM employee or user to organizational unit
    This should solve your problem.

  • How to display filtered data based on user login

    We have a SSRS report (.rdlc) which gives the report about Online count of machines. Report is incoperayed in Asp.net.
    We have many filters in This report. Now we have to retrict the report based on user login to the application .
    For ex: report has a drop down for Regional Admin. Now if one person login to the application he has to view only his region online count.
    How can we do this in SSRS?. We have our application hosted in Microsoft Azure . Please suggest

    Hi csmbrnoc,
    In Reporting Services, if we want to filter data based on user login, then there must be some relationship between the UserID and the Region in the dataset. For example, there is a field named UserID in the dataset, and each ID map some region and the corresponding
    “Online count of machines”. In this scenario, just as Visakh suggested, we can use built-in field User!UserID to obtain UserID of the current user, then directly add a filter to the dataset as below:
    Expression: [UserID]
    Operator: =
    Value: [&UserID]
    If there are any other questions, please feel free to let me know.
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • Last user login

    Hi all ,
    I need to shutdown a few databases, but before that i need to know the users who had used it and when did they use it.
    How to go about it ?
    I checked and found dba_users view , but that will not give me the information of the last user login with the date.
    Other option is select * from dba_audit_session;
    but for that also , I am not sure if auditing is enabled or not.. Need to check on that.. Also this is my homework that i am doing for the database whose access i will get in a while.. so dont even know the version. All i know is that itys on windows machine.
    any suggestion/help would be appreciated
    KKuKreja

    Hi,
    If you want to check who all are accessing the database just before the shutdown you can check the v$session.
    COLUMN username FORMAT A15
    col osuser for a15
    col module for a15
    COLUMN machine FORMAT A30
    col program for a20
    COLUMN logon_time FORMAT A20
    SELECT NVL(s.username, '(oracle)') AS username,
           s.osuser,
           s.sid,
           s.serial#,
           p.spid,
           s.status,
           s.module,
           s.terminal,
           s.machine,
           s.program,
           TO_CHAR(s.logon_Time,'DD-MON-YYYY HH24:MI:SS') AS logon_time
    FROM   v$session s,
           v$process p
    WHERE  s.paddr  = p.addr
    and s.username not in '(oracle)'
    ORDER BY s.username, s.osuser;But if you want to know who all have accessed till now, auditing is necessary.
    Well, little weird, but if you are on 10g and above check the v$active_session_history where you have 'machine' column.You can get all the distinct machine names from which the connections came to the database.
    Anand
    Anand

  • How to configure Email notification for User login's in Exchange Infrastructure?

    How to configure Email notification for User login's in Client Machines?

    Hi ,
    Based on the description , you need to assign logon scripts to the end users via group policy and also use your exchange server as the smtp server in that logon script to relay emails to the internal recipients.
    Thanks & Regards S.Nithyanandham

  • As a Hyperion Admin how to track changes if one user changes / creates user

    1) in Hyperion how Admin can find if one user
    Password resets logged.
    2)In hyperion how Admin an fine if one user
    Creation, change and deletion of User accounts logged.

    Shared Services allows the auditing of provisioning and life-cycle management activities to track changes to security objects and the artifacts that are exported or imported using Lifecycle Management Utility.
    For Shared Services auditing, refer Page 129 of http://download.oracle.com/docs/cd/E12825_01/epm.111/epm_security.pdf
    Planning Administrators can select aspects of the application for change tracking. For example, you can track changes to metadata, such as when users change a member property or add a currency. You can also track changes in data forms, business rules, workflow, users, access permissions, and so on.
    For Planning auditing, refer Page 56 of http://download.oracle.com/docs/cd/E12825_01/epm.111/hp_admin.pdf
    HTH-
    Jasmine.

  • View hard disk data from different user login

    I have Macbook pro. Took a back with a new user login, but apple ID is same. How to view the data.

    The only way to view the data in another home folder is to login as that user, or log in as root.
    Follow the directions at this page to login as root.  https://support.apple.com/kb/ht1528

  • How to find out the last time login for a locked login account?

    In ASE 15.4,there are many login account show as locked and unlocked. How to find out the last login time for those locked login account?

    Thank you.  The version of my ASE is 12.5.4.
    This is what I got from select * from syslogins: 
    suid status accdate totcpu totio spacelimit timelimit resultlimit dbname name password language pwdate audflags fullname srvname logincount procid
    1
    30 2 10/25/2012 11:41:10.430 AM 0 0 0 0 0 . . ... us_english 02/24/2.0.08 12:55:38.640 PM 0 [NULL] [NULL] [NULL] [NULL]
    this is what I got from exec sp_displaylogin 'mylogin':
    1 Suid: 46                               
    2 Loginame: mylogin   
    3 Fullname: FN LN
    4 Default Database: mydb
    5 Default Language: us_english   
    6 Auto Login Script:    
    7 Configured Authorization:   
    8 Locked: YES                              
    9 Date of Last Password Change: Apr 17 2010  2:36PM    
    10 Password expiration interval: 0            
    11 Password expired: NO                               
    12 Minimum password length: 6            
    13 Maximum failed logins: 0            
    14 Current failed login attempts:    
    15 Authenticate with: AUTH_DEFAULT                     
    which one is for last login time?

  • Filtering report data based on user login and Parameter fields

    Post Author: mronquillo
    CA Forum: General
    Hi,I am running a report that filters data based on the user login. To do this, I created a formula called @user that compares the login name (using the CurrentCEUserName field) and returns the user's name. If the user login is not a login specified in the if statements, it returns the parameter field "user_name":For example: if CurrentCEUserName = "loginname1" then "User's Name 1"else if CurrentCEUserName = "loginname2" then "User's Name 2" else if CurrentCEUserName = "loginname3" then "User's Name 3"  else if CurrentCEUserName = "loginname4" then "User's Name 4".. .else {?user_name}   In select expert, I have a condition which filters data based on the string returned from that formula:{Table.Name} = {@user}  This works fine and when the users run the report they only their own data. However, they are still prompted to choose a parameter field regardless if of the value returned by the @user formula. Oddly enough, regardless of what parameter field they choose, they will still only see their own data (i.e. if John chooses "Bob" from the parameter list, he will still only see John's data.)If I remove the "else {?user_name}" line from the @user formula, then the users are not prompted anymore. However, if they are not a "valid" user - that is, if any of the if statements in the formula are not true for their login name - then they will see no data. What I want to do is make the report ONLY prompt the user to choose a parameter field if their login name is not "valid". That is, if the @user formula is able to return a string value for their login name, then they will jump right into the report without being prompted to choose a parameter - otherwise, the user will be prompted to choose a name from the parameter list. I thought my formula would allow this (hence the "else" clause), but it seems that if a parameter field is present in any formula, then the report automatically prompts the user to choose a parameter. Is what I am trying to accomplish possible in CR (I'm using CR v10.0) or is there a better way to do what I am trying to do?Thanks in advance.

    Post Author: sharonmtowler
    CA Forum: General
    try, or something like that
    (if CurrentCEUserName ={?user_name} then true else ({Table.Name} = {@user}) )

  • In fnd_request.add_layout how to get the layout in user login language

    Hi All,
    I am using fnd_requet.add_layout
    function add_layout (template_appl_name in varchar2,
    template_code in varchar2,
    template_language in varchar2,
    template_territory in varchar2,
    output_format in varchar2,
              nls_language in varchar2 default null) return boolean;
    how to pass these template_language and template_territory to get the output in user login language.
    Thanks in advance
    Jana

    You can get the values from NLS_SESSION_PARAMETERS
    Query for language
    SELECT LOWER(FL.iso_language)
    FROM NLS_SESSION_PARAMETERS NSP
    ,fnd_languages FL
    WHERE NSP.parameter = 'NLS_LANGUAGE'
    AND NSP.value = FL.nls_language;
    Regards
    Nishka

  • How to track the existing logged user on the portal

    Hi
    I am using portal 3.0.9.8.1.
    From time to time , I am stopping the Oracle http server for the
    purpose of deploying new servlet class/jar files in its
    configuration files.
    My question is "How to define/track the list of users who are
    currently accessing the portal"?
    In my portal configuration, I setup up the life cycle of new
    session id for 15 minutes so it is assumed that I should get
    only the list of active users (< 15 minutes) !!!
    thanks in advance

    Hi
    First of all, thanks for your reply.
    I issue a simple SQL Statement as follows :
    select count(*) from wwlog_activity_logs;
    It generates for me around 1300 rows!!!! Is it normal?
    Currently, the portal is used only for intranet purposes and the
    number of users is only 5?
    How the portal is updating this table? is is a historic table?
    Can I delete the content of this table at any time?
    Thanks in advance for your feeback

  • How to populate date & time when user enter data for custom table in sm30

    Can anyone tell me How to populate system date & time when user enter data for custom table in sm30..
      Req is
      i have custom table and using sm30 user can enter data.
    after saving date i want to update date & time in table
    Pls let me know where to write the code?
    Thanks in Advance

    You have to write the code in EVENT 01 in SE54 transaction. Go to SE54, enter your Ztable name and in the menu 'Environment-->Events'. Press 'ENTER' to go past the popup message. In the next screen, click on 'New Entries'. In the first column, enter 01 and in the next column give some name for your routine(say UPDATE_USER_DATE_TIME). Then click on the souce code icon that appears in blue at the end of the row. In the code, you need logic like below.
    FORM update_user_date_time.
      DATA: f_index LIKE sy-tabix.
      DATA: BEGIN OF l_total.
              INCLUDE STRUCTURE zztable.
      INCLUDE  STRUCTURE vimtbflags.
      DATA  END OF l_total.
      DATA: s_record TYPE zztable.
      LOOP AT total INTO l_total.
        IF l_total-vim_action = aendern OR
           l_total-vim_action = neuer_eintrag.
          MOVE-CORRESPONDING l_total TO s_record.
          s_record-zz_user = sy-uname.
          s_record-zz_date = sy-datum.
          s_record-zz_time = sy-uzeit.
          READ TABLE extract WITH KEY l_total.
          IF sy-subrc EQ 0.
            f_index = sy-tabix.
          ELSE.
            CLEAR f_index.
          ENDIF.
          MOVE-CORRESPONDING s_record TO l_total.
          MODIFY total FROM l_total.
          CHECK f_index GT 0.
          MODIFY extract INDEX f_index FROM l_total.
        ENDIF.
      ENDLOOP.
    ENDFORM.                    " UPDATE_USER_DATE_TIME
    Here ZZTABLE is the Z table and ZZ_USER, ZZ_DATE, and ZZ_TIME are the fields that are updated.

  • Hard problem. how to track which application a user opens next?

    Hello,
    When the user runs my program,
    then **with his permission**, I want to be able to track
    which application the user has opened.
    For example, if he opens resume.rtf in MSWord, then I
    should be able to record or store the full path of
    MSWord and also the document path (c:\my
    documents\resume.rtf).
    Do you know how to do it?
    I would appreciate any help.
    thanks,
    Anil Philip

    In this old link
    http://www.gamedev.net/community/forums/topic.asp?topic_id=313980
    Da Wanderer has posted code (in Visual Basic?) to open a folder. He says it is cross platform. I am stumped by the code for Linux. Does anyone know if it will work for Linux. ie. Can I use the same options to open a document in Linux?
    I plan to use Runtime.exec similarly in Java, to open a doc.
    if (vars.Contains("GNOME_DESKTOP_SESSION_ID"))
                   processes.Add( new ProcessAndArgs("nautilus", "--nodesktop --browser " + path) );
                   osFound = true;
              else if (vars.Contains("KDEDIR"))
                   processes.Add( new ProcessAndArgs("kfmclient", "exec " + path) );
                   osFound = true;
              }

  • How to get an alert when user login with "DDIC" in any of the systems?

    Hi all,
    Can it be possible when ever the user login with DDIC user  in any of the satellite system,can we we  get an alert -as DDIC login attempt in any system?
    Is this possiblem in CCMS or BPM or...?
    Regards,
    Neni

    Hi Srikrishna,
    Link which you have give is good.But when i login with DDIC i am not geting alerts and i am not able to add any satllites system to
    under Security node
    My configuration:
    Miximum values for list                               1 min
    When should an alert be triggered?
    From value                   Red               Severity      2
    Max. number of alerts for each message ID             50
    Max. number of lines to be saved                      50
    SM19
    Client     *                                                     Events
    User       DDIC selected -Dailog logon         Alll
                                           systmem
    Please help me.
    Regards,
    Swaroop

  • HT3754 how to track data usage per app in iPhone

    Hi
    Anybody know How to get Data usage per app in iphone ?.
    Advance Thanks & Regards,
    Gokul.

    In that case app is there like onavo.

Maybe you are looking for

  • ITunes Match on iPhone and Apple ID Question

    I am enabling match on my wifes iPhone, I know I have to use my Apple ID to do so, this brings me to the following: I did notice something however, I know to make sure her iCloud uses her ID, however, when I go to messaging and look at the send/recei

  • Search help for business partner ID in segmentation applet

    Hello, In CRM 2007 I'm using the segmentation toll. When creating filters for Business Partner ID criterium I'm using a search help functionality to find the desired records. However search help for business partners used in this area is very differe

  • What is 'DATA_PACKAGE' now called in Transformation Routine?

    Hi BW ABAP'ers, I am trying to code a start routine in a transformation for a data target.  When I did a syntax check on my ABAP codes, I get a syntax error on 'DATA_PACKAGE'.  Does anyone know what it is now called in BW 7 ? Please let me know. Many

  • FTP Adapter configuration for UNIX env

    Hi Can anyone help in setting up an FTP adapter which will just read files from the given location in a UNIX environment. I have done the same in windows environment with FILEZILLA and it works fine. Now i need to implement the same in UNIX environme

  • How to view 'Balanced Leaves'?

    Hi Team, Could any one tell me 'How can I check the BALANCED LEAVES' for PL, SL etc. I gave the leaves 30 for PL and assigned quota 5 days, balanced 25 leaves should display (in 2006 or in pt50), but it is not showing the balanced leaves, it displays