Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP Check #37

Open
Smullz622 opened this issue Mar 21, 2023 · 5 comments · May be fixed by #94
Open

LDAP Check #37

Smullz622 opened this issue Mar 21, 2023 · 5 comments · May be fixed by #94
Assignees

Comments

@Smullz622
Copy link
Contributor

No description provided.

@nmg110
Copy link

nmg110 commented Mar 21, 2023

Every now and then we need to check the status of accounts in Activity Insight, we download the list of active users that are staff and faculty. We have the ability to cross check most faculty from a report pulled from Workday, but we are finding that we have to cross check faculty and staff at http://www.work.psu.edu/ldap/ because the faculty may not be appearing in our list. Sometimes the number of faculty/staff we need to double check can be 200 or more and as you can imagine that would take us a lot of time.

What I would like to do is to upload a csv file that contains First Name, Last Name, and PSU Access ID to the FAMS Tool, and it check "ldap" and then update the file we uploaded with the following fields:
EduPerson Primary Affiliation
Title
Business Area
Department
Campus

I will then use these results to disable or enable faculty accounts.
Eventually, I would like to build off of this process so it automatically disables the accounts where the LDAP information comes back with EduPerson Primary Affiliation with "Member" or comes back with the user cannot be found.

@binkylush binkylush mentioned this issue Jan 15, 2025
@memsdm05 memsdm05 self-assigned this Jan 29, 2025
@memsdm05
Copy link

memsdm05 commented Jan 29, 2025

Just from first pass:

  • Connect to central ldap (maybe make that a class like employee dir)
  • Make integration for checking user status
  • Make csv importer and exporter (again should be in its own job)
  • maybe (big on this) also do auto delete on AI side (maybe have an opt in for this)

@memsdm05
Copy link

memsdm05 commented Jan 29, 2025

After talking to Nicole:

Have the integration take a CSV (which will follow what the example will be), pull relevant info from central LDAP (as defined in this issue), THEN also have the option of disabling (not deleting) faculty if eduPersonPrimaryAffiliation is "member". If this functionality is requested (maybe some sort of button or switch in the front end, sent as a boolean flag), the CSV will also indicate which faculty account has been disabled (a new column, something like now_disabled).

@nmg110
Copy link

nmg110 commented Jan 29, 2025

Here is the file we would submit via the tool. We want to make sure if LDAP returns Member they then get disabled in Activity Insight, but if they can't be found in LDAP the response back can be user not found.

LDAP_Check.csv

@memsdm05 memsdm05 linked a pull request Jan 31, 2025 that will close this issue
@memsdm05
Copy link

Include whether or not an user is already disabled. Get this info even when not disabling.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants