Login
Register
Search
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Forums
Infor / Lawson Platforms
S3 Security
Autoprovision new Lawson Users
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Who's On?
Membership:
Latest:
Saef
Past 24 Hours:
0
Prev. 24 Hours:
0
Overall:
5226
People Online:
Visitors:
260
Members:
0
Total:
260
Online Now:
New Topics
User Group Announcements
Carolina User Group Meeting
12/20/2024 3:15 PM
Date & Time: February 6, 2025, 8:30am - 4:00pm
S3 Systems Administration
ADFS certificate - new cert
12/3/2024 9:38 PM
The certificates on the windows boxes expired and
Lawson S3 HR/Payroll/Benefits
Post Tax Benefit Plan Table
11/14/2024 9:16 PM
Hi, totally new to Laswon. I have a repor
Lawson S3 Procurement
ED501 Error: Map 850 not supported by /law/c15vda/lawson/test10/edi/bin/laws_out_91
11/12/2024 3:47 PM
Tried runnning ED501 and getting the atathced erro
Lawson S3 HR/Payroll/Benefits
Error
11/6/2024 9:54 PM
When I try to enroll a retiree in 72.1 health plan
Infor ERP (Syteline)
Syteline: New Data Maintenance Wizard (Error) Need help
11/1/2024 4:24 PM
Hi, I need help with an error on syteline while us
Dealing with Lawson / Infor
Implementing Lawson v10 with Cerner Surginet, Case Cart Picking, and Quick Adds for the OR
10/29/2024 4:20 PM
Hi Everyone, I am wondering if there is any org
Lawson S3 HR/Payroll/Benefits
Canada Tax Calculation (Federal and Provincial) Issue
10/23/2024 5:00 AM
Initially, we had problem with CPP2 calculation is
Lawson S3 HR/Payroll/Benefits
CA Section 125 401k Plan
10/22/2024 10:13 PM
Does anyone have any recommendations on how to fac
S3 Systems Administration
Running AC120 deleted records from ACMASTER table
10/22/2024 3:40 PM
We recently ran the AC120 as normal and somehow it
Top Forum Posters
Name
Points
Greg Moeller
4184
David Williams
3349
JonA
3291
Kat V
2984
Woozy
1973
Jimmy Chiu
1883
Kwane McNeal
1437
Ragu Raghavan
1372
Roger French
1315
mark.cook
1244
Forums
Filtered Topics
Unanswered
Unresolved
Announcements
Active Topics
Most Liked
Most Replies
Search Forums
Search
Advanced Search
Topics
Posts
Prev
Next
Forums
Infor / Lawson Platforms
S3 Security
Autoprovision new Lawson Users
Please
login
to post a reply.
6 Replies
0
Subscribed to this topic
15 Subscribed to this forum
Sort:
Oldest First
Most Recent First
Author
Messages
Sarah
New Member
Posts: 4
6/16/2011 12:45 PM
We are in the process of identify the best way to auto provision new users to Lawson LS Security, and deprovision roles when transfers/terminations occur.
We are ldap bound, and would like to utilize either PFI or an ldap provisioning tool (CA/FIM/etc).
How have others resolved this issue? What tools did you use?
Thanks!
Gary Padgett
Veteran Member
Posts: 90
6/16/2011 1:53 PM
We are in the process of implementing Courion for our enterprise-wide provisioning to multiple systems as well as Active Directory and email. I am not the one working on it, so I don't have a lot of insight.
However, what we're doing now for new users might be of some assistance. We get a spreadsheet from HR with all relevant info for these new users. I wrote a perl script to read that csv file and create an xml file in a format that "loadusers" can use. This gives basic ESS access to all new users.
For transfers and terminations, we're still doing those manually for now.
BarbR
Veteran Member
Posts: 306
6/16/2011 2:36 PM
We are also bound to the LDAP. We build a daily .xml file that a ProcessFlow FTP's to the Lawson server and executes the loadusers utility. Soon we hope to have ProcessFlow build the .xml file too, but we aren't there yet. We build the .xml file in an MS Access application that has three sources of data; a nightly extract of the RMID's, a nightly extract of the employees on HR11, and an internal system (our Help Desk system) that contains the Lawson employee number, the network ID, and their email ID. From the HR11 we can tell which RMID's need to be created. If the person is both on the HR11 and the RMID, we look for any changes that would change their groups, roles, name, email ID, etc., and build change records. If the person is terminated on HR11, we build an update record with an inactive group, role, and portal role that gives them a "your userid has been inactivated, blah blah blah" message. Our RMID add/change/inactivate process is entirely hands-free. After the RMID updates, we also run a PFI that reads the RMID and picks up any new email ID's and updates the HR11.
Like I said, soon we hope to have PFI update the RMID directly, but we are waiting for a replacement of our Help Desk software first.
Adam Goldstein
Basic Member
Posts: 4
7/1/2011 11:24 AM
Utilizing the Resource Query and Resource Update node in PFI should be more direct and easier than loadusers, plus avoid any complexity of formatting the xml file. The Resource Update node should enable you to Add/Change any field on a users RM record. Note you will need either PFI or PFX as ProcessFlow Professional will not have access to the Resource Update node.
kdcoate
Veteran Member
Posts: 44
7/1/2011 12:40 PM
We use the ProcessFlow Resource Query and Update nodes to generate all of our new Lawson LS accounts and make some changes based on transfers. However, we also have a custom on-boarding process built to set the AD username from Lawson - so we're able to have that username available for the account creation.
Nirav Bhatt
Basic Member
Posts: 6
7/1/2011 12:56 PM
We have implemented Process Flow which creates ESS/MSS users everyday based on the HR11. We have also implemented Termination/Position Change based on the personal action in the same process flow. PFI has node called RMUpdate which can be used to add, delete, or modify the RM user id.
JeffR
Advanced Member
Posts: 22
7/19/2011 8:56 PM
We use ProcessFlow to add new hires and modify rehire RM records using the RM Update and RM Query nodes. We have a flow that extracts all newhire and rehire employee data for the day and that information sent over to be loaded or updated in AD which passes back the login ID, and Email Address. We then update the RM record giving the employee ESS access.
Please
login
to post a reply.