Hello,

When a new user is created in IDM and is given the user account
entitlement for AD and the exchange account entitlement for Exchange,
the driver and the shim creates an Exchange account, and an email
address of cn@customer.com is given. How can i change this, so that the
email address will be something-else@customer.com ? I have the correct
email address in an attribute in eDirectory, and would like to use that
one instead. As I see it, there is no easy way to do this.

My clumsy solution:

1. Let IDM create the Exchange account.
2. Email address is synced to IDM after a while through the AD driver
3. Have a null driver listen on that event and set Internet EMail
Address in IDM to the real one
4. AD driver listens to this and uses powershell to change the email
address to the correct one, which I got to work like this:


Code:
--------------------

<do-set-dest-attr-value name="PSExecute" when="before">
<arg-value type="string">
<token-text xml:space="preserve">Set-Mailbox -Identity '</token-text>
<token-src-name/>
<token-text xml:space="preserve">' -EmailAddresses @{Add='</token-text>
<token-op-attr name="mail"/>
<token-text xml:space="preserve">'}</token-text>
</arg-value>
</do-set-dest-attr-value>

<do-set-dest-attr-value name="PSExecute">
<arg-value type="string">
<token-text xml:space="preserve">Set-Mailbox -Identity '</token-text>
<token-src-name/>
<token-text xml:space="preserve">' -PrimarySmtpAddress '</token-text>
<token-op-attr name="mail"/>
<token-text xml:space="preserve">' -EmailAddressPolicyEnabled $false</token-text>
</arg-value>
</do-set-dest-attr-value>

<do-set-dest-attr-value name="PSExecute" when="after">
<arg-value type="string">
<token-text xml:space="preserve">Set-Mailbox -Identity '</token-text>
<token-src-name/>
<token-text xml:space="preserve">' -EmailAddresses @{Remove='</token-text>
<token-src-name/>
<token-text xml:space="preserve">@customer.com'}</token-text>
</arg-value>
</do-set-dest-attr-value>

--------------------


This is very clumsy. Can i somehow create the mailbox from the
beginning, with the correct email address from the attribute in
eDirectory?

Thanks in advance,

Jacob.


--
jacmarpet
------------------------------------------------------------------------
jacmarpet's Profile: https://forums.netiq.com/member.php?userid=415
View this thread: https://forums.netiq.com/showthread.php?t=56608