Microsoft Identity Manager 2016 Handbook

Temporal sets

In many situations when we manage users, we are working with time-dependent actions.

For example, we might state that a user should be disabled in Active Directory the day his/her employment ends, but should be deleted from AD 30 days after the end of their employment. How do we do that in MIM?

First of all, we need to get the employment dates into MIM. Usually, we get them from the HR system. It is a bit tricky to work with date/time attributes, since localization and formatting can require us to do some troubleshooting before we get it right. You will very likely end up using the built-in DateTimeFormat function when importing date/time data from HR or some other source, and converting it to the yyyy-MM-ddTHH:mm:ss.000 format used ...