I used IDM 4.0.2 subscriber user account to Sap,
but I design a policy that will check the user's Group memberships
before create user sync to SAP in Matching Policy.
At begin It will veto the creation event, but when I modify the group
memberships, the IDM is NOT send any event.
But when I modify other attribute(ex. title), It will send the modify
event include group membership to SAP.
What's wrong about this?
anybody can help me?
Thank you.

miller_chen's Profile: https://forums.netiq.com/member.php?userid=4567
View this thread: https://forums.netiq.com/showthread.php?t=49473