Idea Details

Additional User Account Details in CA PAM

Last activity 03-24-2017 10:08 AM
Steve_Stanczak's profile image
08-16-2016 10:53 AM

Please add the following data points in CA PAM for Users:

 

a. Account Created Date

b. Last Log-in Date

c. Account Disabled Date

d. Account Disabled Reason


Comments

03-24-2017 10:08 AM

I like Stephens Idea here, but I think it would be more beneficial for more customers if they could set a list of exactly which attributes are read from AD/LDAP. For some customers these specific ones would be of interest, but other customers could want other information.

 

One possible problem I see here is that many fields like the ones mentioned are not static, so they could only be as up to date as the last LDAP scan or attempted PAM logon of that user. Some, like last logon date, are also generally not kept in real-time sync among the AD DCs & depending on which DC was contacted last there may be different information found.

03-23-2017 06:13 AM

yes we need this information also

hopefully this point release ASAP

08-18-2016 03:37 PM

Hi @Steve_Stanzak - Thank you for your submission.  This item is currently under review.

 

Mike