Welcome!

Identity Management Tips, Thoughts and Opinions

Matthew Pollicove

Subscribe to Matthew Pollicove : eMailAlertsEmail Alerts
Get Matthew Pollicove via: homepageHomepage mobileMobile rssRSS facebookFacebook twitterTwitter linkedinLinkedIn


Blog Feed Post

Read Created Users Task Bug

Quick tip: Be careful when using the Read Created Users template from IDM 7.1 and 7.2. It seems there is a small bug in the source LDAP filter.



In the Read Created users from AD pass template the filter reads:

(&(objectclass=user)(uSNChanged>=$FUNCTION.GetCreate()$$))

However it should read:
(&(objectcategory=user)(uSNCreated>=$FUNCTION.GetCreate()$$))

Fortunately, this is an easy fix. Found this on a recent project where we needed to gather all newly created users for some processing but found that we were gathering too many users.  After a little investigation we found the problem and fixed it.

Read the original blog entry...

More Stories By Matthew Pollicove

Matt Pollicove is an Identity Management architect, engineer, trainer, project manager, author and blogger with experience in user account provisioning, data synchronization, virtual directory and password management solutions. As a MaXware Technical Consultant and later as a System Engineer, he worked extensively with MaXware (now SAP) software products in large customer environments. In the past Matt has worked with several leading national and international consulting firms and is currently a Sr. Principal Consultant for Commercium Technologies. He is currently the Practice Lead for SAP NetWeaver Identity Management and SailPoint IIQ.