[midPoint] To delete or not to delete accounts on a resource?

[Jason Everling]

Do you delete accounts on a resource when the person leaves or do you just
disable them?

We have never had any type of IDM system before midpoint, so disabling the
account was easier to maintain since the system would not let us create
another account using the same username. We do not re-issue a username to
someone else, that person will always have that username since there are
records/logs tied to that username.

Now that we have had midpoint up running for about a year now and the user
would (*should*) never get deleted from midpoint we could technically
delete their resource accounts without having to worry about it being
re-issued. It would also help with some of our licensing that is based on
per user account, some software count even the disabled users!

Thanks for any input!

JASON

-- 


CONFIDENTIALITY NOTICE:
This e-mail together with any attachments is proprietary and confidential; 
intended for only the recipient(s) named above and may contain information 
that is privileged. You should not retain, copy or use this e-mail or any 
attachments for any purpose, or disclose all or any part of the contents to 
any person. Any views or opinions expressed in this e-mail are those of the 
author and do not represent those of the Baptist School of Health 
Professions. If you have received this e-mail in error, or are not the 
named recipient(s), you are hereby notified that any review, dissemination, 
distribution or copying of this communication is prohibited by the sender 
and to do so might constitute a violation of the Electronic Communications 
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the 
sender and delete this e-mail and any attachments from your computer. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161025/3dab2497/attachment.htm>