indigo-iam / iam

INDIGO Identity and Access Management Service
https://indigo-iam.github.io/
Other
102 stars 43 forks source link

let the HR DB check restore users? #768

Open maarten-litmaath opened 4 months ago

maarten-litmaath commented 4 months ago

When a user is found to have left an LHC experiment, their account is disabled and scheduled for removal after a configurable grace period. Quite often, however, such a user will soon start a new contract (usually at another institute) and continue working for the same experiment. IAM could detect that automatically and restore the account accordingly. This may avoid the need for a manual intervention by a VO admin. If the check runs ~hourly, the process would be transparent in most cases.