As the provisioning framework for SAP Systems delievered with the SAP NetWeaver Identity Manager doesn't support time dependencies in role assignments, I wonder if one could not emaluate similiar funcitionality within the Identity Center.
Would it be possible to create a multi value attrbute "Temporarily Assignment" in which one would enter the role names & validation fields of all temporarily assigned roles, and then create a scheduled job (running maybe once a day, at midnight) with a script reading these values of each user and then initiating deprovisioning tasks for each entry which has reached validation date?
Granted, this would be a lot of scripting to do and nobody should be allowed to temper with this attribute via UI. In addition, there will be some issues about adding or deleting <i>some</i> enries in the attribute and not always all, if you not intend to design the workflow in a way that only <i>one</i> date will be used for all roles.
But it should work, shouldn't it?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.