OID Incremental Recon Does Not Detect Group Membership Changes Using OIM OID Connector
(Doc ID 1081455.1)
Last updated on OCTOBER 22, 2019
Applies to:Identity Manager Connector - Version 9.0.4 and later
Information in this document applies to any platform.
The "modifytimestamp" attribute for user entries does not reflect the membership changes in related group entries. While modifytimestamp can be indexed and used for incremental recon, most changes are to add/remove uniquemembers to/from from groups. When a user is added to or removed from a group CN, there is no change of user entry timestamp and the user / group memberships will not be reconciled for the user. The goal is to reconcile user modifications when the only change is a change in group memberships.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document