Dear all,
I want to configure an Internalization and an Externalization process within an import connector and don't know how.
The situation is the following:
The tenant receive all identities (internal and external) from the same source
The source sends the identity type associated with each identity
If I detect a type change:
External --> Internal = transformation of the existing external identity into an internal one ("migration" from external type to internal type, transformation of email address + retention of the previous one as an alias, preservation of access rights, provisioned accounts, mailbox, audit trail, enrolled authentication devices, ...)
Internal --> External = deactivation of the internal identity + creation of a new external identity
Identities retain their "source ID" when a type change occurs (so correlation is easy to do)
I would like to know if you have examples and/or best practices of configuration to perform these processes. Basically, I need to find a technique so that:
Same ID and same employee type → I correlate
Same ID and employee type changes from EXT to INT → I correlate and transform the identity
Same ID and employee type changes from INT to EXT → I do not correlate, so I have one identity that disappears and one that appears
Thank you in advance for your help.