Please add the following data points in CA PAM for Users:
a. Account Created Date
b. Last Log-in Date
c. Account Disabled Date
d. Account Disabled Reason
I like Stephens Idea here, but I think it would be more beneficial for more customers if they could set a list of exactly which attributes are read from AD/LDAP. For some customers these specific ones would be of interest, but other customers could want other information.
One possible problem I see here is that many fields like the ones mentioned are not static, so they could only be as up to date as the last LDAP scan or attempted PAM logon of that user. Some, like last logon date, are also generally not kept in real-time sync among the AD DCs & depending on which DC was contacted last there may be different information found.
yes we need this information also
hopefully this point release ASAP
Hi @Steve_Stanzak - Thank you for your submission. This item is currently under review.