Feature request - Time limited group membership

Question

Dear support,

Active Directory on Windows 2016 will support this much anticipated feature. It will be possible to assign a user to a group for a limited time frame

I would really love if you could investigate about this new possibility and support it in a near futur.

Cheers

Answer 1

Hello Pierre,

The feature is on our radar as well, and with a very high priority.

Comments

Hello,

Its been more then 1 year. How much on the radar is this function?
It is quite critical to the way security procedures work in our company, thus I would like to escalate this request.

Kind regards.

---

Hello,

The feature has been announced in Windows Server 2016. We are investigating the possibility of adding it to Adaxes.

As a workaround we suggest the following scenario:

1. In the Web interface, there will be several Home Page Actions, using which users can be added to groups.
2. When a user clicks a Home Page Action, they will be presented with a form where they will be able to specify the end date where their membership expires.
3. When the action is executed, the user will be added to the selected grou or groups. the end date that the user specified and the group DN will be saved in a custom multivalued property of the user. For example, you can use one of Adaxes custom attributes, such as, for example, CustomAttributeMultiValue1. Using a multi-valued attribute will allow add the same user to multiple groups at a time.
4. A Scheduled Task that runs, say, once a day will check the date specified for each group. When due, it will remove the user from the corresponding groups.

Will this suit your needs?