We have IPA's to create our actors/rmids and the association to their LDAP Accounts (LTM/Landmark- Identity link and SSOP service creation in S3)
However, for the process when employees terminate is kind of time consuming.
Our organization process is to get a list of 'termed' employees from HR and mainly our IT Service Desk manually deactivate their AD accounts and other system accounts. With our recent Infor implementation in May, I didn't have time to investigate options for automating this.
The manual process is to simply remove the Identity link on the Actor record, delete the identity and remove the S3 SSOP service (lsfprod environment service if applicable).
I was going to 'dig in' to see about automating with an IPA but wanted to see if anyone was doing this or had any advise/gotchas on automating this.
Thanks in advance for any feedback.