How to create Generic id's with LDAP authentication

[Former Member]

Hello,

we are using GRC 5.3 with SP7.We are using LDAP as Authentication method.

So now my concern is if we want to create any generic id's how do we create it i.e. OSS_* or Support_* etc.

I suppose others also would have encountered this scenario so what was the workaround.

Thanks

Uday

[frank_bannert · Accepted solution]

Hi Uday,

when talk about generic accounts it rings the Compliance Bell to me.

Why would you have an account (dialog of course) not assigned to a single person?

Best,

Frank

[Former Member · Accepted solution]

Hi Frank,

For e.g.We want SAP consultants or external partners to come on to the system on temporary basis.How would be able to create generic id's for it.I mean is it even feasible to do it.

Thanks

Uday

[frank_bannert · Accepted solution]

Hi Uday,

I would create one account per person and either directly limit the validity or set a de-provisioning process in place.

If you have a generic account it will be hard for you to proof your auditor who you when the account with which privileges.

Other idea, if you are talking about quick work issues, e.g. bugfixing an ERP system, wou may want to think about the FireFighter approach.

Best,

Frank