COmanage Users List

[Randall Smith <>]

Greetings,

I'm setting up Comanage for Identity management and provisioning. I've run into a problem and I'm trying to understand some of the thought process and expectations for Comanage.

Here's the deal. I'm looking at how to manage people. Adding an individual is pretty simple. Where it gets problematic is people that are both employees and students. We provision a separate account for each type with different UIDs. For example, John Smith might have a staff account "jsmith" and a student account "smithj002". Each account needs to be provisioned separately.

My first thought was to create an organizational identity for each with the different UIDs set as an identifier. So the person would have an OID for the employee account and one for the student account.

The problem comes with provisioning. The Grouper provisioner operates at the CO Person level which means that it completely ignores the OIDs. I believe the same is true when it comes to the LDAP provisioner.

I have two questions: How should I be approaching this so that I can provision the different accounts? What are the expectations within Comanage for dealing with people who have multiple accounts?

Thanks

--

Randall Smith

Sr. Systems Administrator / Architect
Adams State University
http://www.adams.edu/
719-587-7741