There are users that have user_id values below where the knta_users_s sequence starts (usually < 30000). These are users created by the application. Do not modify these.
To create users, I insert into knta_users_int and run the Import Users report daily. But you can take a look at the database packages: knta_user_int and knta_users_th if you want to create your own process.
To modify users I call database procedures from execution steps to:
Update Name, Phone, Email, etc - knta_users Add/Remove licenses - knta_user_products Add/Remove Security Groups - knta_user_security Disabling a user: update the end_date on knta_users
Yes.. that's right.. I really missed to mention the username column. So you will need to update both the 'username' and the 'logon_identifier' columns. Let me know if there's anything else you think.. which I probably missed again.. that would be learning for me also. Thanks.
If you use LDAP, ITG can synch with LDAP. I have reports setup that run each night and synch with LDAP. To handling licensing and ITG groups, I have active directory security groups for each license group and ITG security group.
The flow works like this: 1. An employee sends our help desk a request to be added to the appropriate security group. 2. I approve the request. 3. Help desk adds them to the security group. 4. That night ITG synchs with the AD security groups using reports.
If you want to know more about this post your questions.
Scott, the common key between my ITG (5.5) and my LDAP is the ITG username. I'm trying to address what to do when a username changes on the LDAP side, because in that case ITG can't automatically match up the new username (from LDAP) with the old username (in ITG). Or can it? How do you handle that scenario? Do you manually update/modify the ITG username before updating from LDAP so that the usernames match? What's a best practice here? Thanks.