Detecting changes in a Directory

Question

Hi,
I have accounts (user objects) provisioned from IDM to a Novell eDirectory.
I also have activesync running so I can detect any changes on the Novell system.
If a user object is moved around in the Novell directory (using the normal Novell
admin interface), the activeSync poll detects this.
How can I then update the account index in IDM to reflect the
new location of the user object in the directory?
thanks,
John I

Answer 1

A previous poster mentioned a rename workflow, have you considered the rename user view?
It's in the Workflows, Forms and Views documentation on page 395. There's an option in there to update the account ID without trying to retrieve the old resource information.
The example in the doc looks close to what you need (though you'll still have to figure out a way to get the view and check it back in):
renameView.newAccountId="saurelius"
renameView.resourceAccounts.selectAll="false"
renameView.resourceAccounts.currentResourceAccounts[Lighthouse].selected="true"
renameView.accounts[AD].identity="cn=saurelius,OU=Austin,DC=Waveset,DC=com"
renameView.resourceAccounts.currentResourceAccounts[AD].selected="true"
renameView.accounts[LDAP].identity="CN=saurelius,CN=Users,DC=us,DC=com"
renameView.resourceAccounts.currentResourceAccounts[LDAP].selected="true"
renameView.accounts[NT].identity="Marcus Aurelius"
renameView.resourceAccounts.currentResourceAccounts[NT].selected="true
{code}
You might not need to change the IDM account ID, just update the resource identity info.  Perhaps also specify the fetchAccounts option as false.
You can see the rename actions in the admin interface too.  Select the user, then under user actions select "rename" and it should show you the resources that you can rename.  (See page 72 of IDM Administration.)
One reason that your rename is failing is possibly because the resource adapter simply does not support renaming.  If that's the case you may be forced to unlink the account in your active sync form and re-link it later on.