Hi! We have created a request form and an AD Connector (which is working fine). We require that the HR fills the request form (considering that she/he is the admin) for any new joiner consisting of basic details as joiner's First Name, Last Name, Employee ID, Supervisor name, Department etc. For that, she would fill out a simple request form that will be somehow linked to the AD. We require that a user account gets created in the AD bearing all the details entered in the form. Next time when the collector runs, the same joiner's details should reflect on the RSA portal. We are using default fulfillment/approval etc. The requests pass the approval and fulfillment phases but we do not see any user/account being created on the AD server. We are not able to figure out how mapping has to be done with the AD. Please let us know how should we proceed.
Also, if there is any other way to fulfill our requirements, kindly let us know.
Hi,
looks more like you want to register a new user.
Have a look at the "Register User" request form type.
In there define the fields for the values you are asking HR for. If you want to use the EmployeeID as the account name, do just that in the Register User command.
this will then create the AD account. You will need an ADC and an IDC . the later collects the info as an identity. make sure the employeeID gets collected into one of the user object attributes, the user_id might be a good spot.
in your ADC user account mapping make sure to map the account mapping attribute (e.g. samaacountname) to the user attribute (e.g. user_id).
that should actually be all it takes
Frank