The above link works great, however for an environment like Active Directory there are some gaps. Is there a way to force an unlock of an account if it's locked out in AD, but due to running collections only once a day shows up as unlocked in IGL?
Currently the form has the button greyed out. It'd be ideal to allow support personnel to unlock an account without having to worry about the state of the account from collections. For example every minute someone may lock themselves out, it's unrealistic to think we'd run an ADC every minute.
Workarounds? I was thinking of perhaps having a local entitlement that I add to a user which would then kick off a fulfillment workflow with a provisioning node to unlock said account.