Dynamic Memberhsip Notifications

How to send notifications on dynamic groups membership changes

Use case

Customer wants notifications for dynamic group membership changes

Issue

You cannot catch dynamic group membership changes as MPRs related to ComputedMember attribute never work (by design)

Solution

ALERT: THIS SOLUTION IS NOT TO BE USED FOR GROUPS WITH >10K USERS AS IT WILL SLOW DOWN YOUR SYNC CYCLE

Create a multi-valued reference attribute AllMembersUnpacked in FIM/MIM Service schema and bind it to group object. Setup import of group membership from FIM/MIM Service to Metaverse.

Additionally set up export of Metaverse Group:Members attribute to FIM Service:AllMembersUnpacked.

Grant permissions to FIM MA to manage this attribute.

The idea is to extract dynamic group membership by importing all members to Metaverse and exporting it back to the portal to AllMembersUnpacked.

As this attribute is a regular multi-valued reference you can create an MPR !Notification: welcome new members of dynamic groups watching for additions and removals from this attribute.

Then you simply add a workflow !Notification: welcome to dynamic group to consume [//Delta/AllMembersUnpacked/Added] and convert this list of users to recipients list by using Update Resource activity.

Select ConvertToUniqueIdentifier([//Delta/AllMembersUnpacked/Added]) as a source and [//WorkflowData/Recipients] as a target.

Then use [//WorkflowData/Recipients] in a standard notification activity.