Hi everybody,
In our environment we need to create temporary users in active directory and deprovision them after X hours (with a maximum of 12 hours).
We thought of using AD group temporary memberships.
Specifically, when a user is created, it is added to the AD group with a membership lasting the necessary hours, after which, when it expires, with the removal, a change workflow is triggered and start the deprovision.
We are having trouble extracting the user that is actually removed from the workflow. Is there a way to get this information so we can trigger deprovision on the specific user?
Thanks in advice,
Andrea
