When CA PAM is integrated with LDAP like Active Directory, is possible send alert when a new device is provisioned in a Active Directory Group and CA PAM refresh it?
As I understand it there is no way to do this within the present PAM functionality. It is I think a good idea, so I would submit it as such
Hello, PAM logs PAM-CMN-2434 messages in the session log for devices that are removed from a device group during refresh, and PAM-CMN-2437 messages for devices that are added. If you have syslog (or Splunk) integration, these messages will be sent to the syslog server, and you can configure alerts there.
Thank You Ralf!!!!!