Welcome to the "community" Jason!



There's many of us here in the same boat you are "working on the replacement of our in-house IDMS with MIM for while now"!!



How do these door (group) memberships get specified?  What kind of attribute of a member says that they should be in this or that door group for what dates?



Off the top of my head, given attributes you could possibly do this kind of thing in the MIM portal/service using a powershell workflow (other brands of workflow do, allegedly, exist).   Having said that, we do all our group management in a separate ADLDS instance sync'd from the FIM sync service.   We have thousands of groups which are maintained according to LDAP filters on them  and an "engine" there cycles through the groups keeping them up to date.   In your case though I'm not sure how you'd do it because you don't just have an attribute that says you should be in a group, you also have dates attached to that.



"It's a fun problem"  Says my colleague Ian.



Cheers

Andy Swiffin

(Dundee)



p.s.  well done, Foo, for beating me to a reply....











-----Original Message-----

From: Discussion for MS IDM tools liks ILM and FIM [mailto:[log in to unmask]] On Behalf Of Jason Green

Sent: 04 May 2017 09:47

To: [log in to unmask]

Subject: Hello and Group Membership Question



Hi all,



I work at the University of East Anglia and we've been working on the replacement of our in-house IDMS with MIM for while now. Because our current system is quite custom we've had some interesting issues getting MIM to do some of the functions the old system current does.

I discovered this list, so I thought I'd say hello and to ask for any ideas on the current issue we are having with group membership.



Our current system has the ability to manage some of our access control (doors) by adding people into card management groups. One of the specific features it has is the ability to add a start and end date for the membership. This is specifically useful for some of our departments/schools that have a lot of different groups to control access to labs etc. A students/member of staff will request access for a define period and the access can be added for that period automatically.



Obviously you can manage manual groups though MIM, but we're not sure of the best approach with trying to add some sort of temporal functionality to the group membership. I'm not even sure if this is possible!



If anyone has come across this problem or has any ideas I'd love to hear them.



Looking forward to engaging with everyone on MIM in Education topics :)





Cheers,



Jason.





-------

[log in to unmask]



Corporate Information Systems

ITCS

University of East Anglia

Norwich



The University of Dundee is a registered Scottish Charity, No: SC015096