Hello experts - What is the proper way (if any) to resolve accounts back to users/identities when there is more than one possible account attribute that can be used to resolve ?
- An AD account may have employeeID (resolution attribute) in the employeeNumber, employeeID or or an extensionAttribute field. It could depend on the type of account
- An application may store employeeIDs and e-mail addresses. EmployeeID is the primary resolution key but may not be accurate for all accounts, so e-mail address should be used for a secondary resolution rule