In many situations when we manage users, we are working with time-dependent actions.
For example, we might state that a user should be disabled in Active Directory the day his/her employment ends, but should be deleted from AD 30 days after the end of their employment. How do we do that in MIM?
First of all, we need to get the employment dates into MIM. Usually, we get them from the HR system. It is a bit tricky to work with date/time attributes, since localization and formatting can require us to do some troubleshooting before we get it right. You will very likely end up using the built-in DateTimeFormat
function when importing date/time data from HR or some other source, and converting it to the yyyy-MM-ddTHH:mm:ss.000 format used in MIM.
We then create what is called a temporal set. This is just a normal set, but we use a criterion that is time-dependent:
We can then use this set to trigger an MPR that modifies an attribute, such as the active attribute I used in my previous...