My Oracle Support Banner

OID Incremental Recon Does Not Detect Group Membership Changes Using OIM OID Connector (Doc ID 1081455.1)

Last updated on SEPTEMBER 22, 2023

Applies to:

Identity Manager Connector - Version 9.0.4 and later
Information in this document applies to any platform.


The "modifytimestamp" attribute for user entries does not reflect the membership changes in related group entries. While modifytimestamp can be indexed and used for incremental recon, most changes are to add/remove uniquemembers to/from from groups. When a user is added to or removed from a group CN, there is no change of user entry timestamp and the user / group memberships will not be reconciled for the user.  The goal is to reconcile user modifications when the only change is a change in group memberships. 


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.