Hi,
I'm trying to set up IdM so that it reads from AD, and based on the AD group(s) assigned, it will assign a business role.
I can read the users and groups from AD, and I can provision business roles from IdM, but I can't get the link between having an AD group and being provisioned with a business role.
It seems most AD scenarios are set up to provision from IdM into AD instead.
I have been playing around with the relationships on roles, groups and privileges, but so far I have been unsuccessful.
Has anyone done this? If so, would you be able to give me any pointers?
If this isn't entirely clear, please let me know.
Your help is much appreciated!
On IdM 7.2
regards,
Henrik