Disable inactive User after X days
I have been trying to figure out a way to mark a user as disabled if they haven't logged in in say 30 days. I am working in an integrated OIM/OAM environment with OUD as the LDAP directory. I have found some suggestions that use fields based on last password entry but we are using an x509 authentication. I have been considering a custom scheduled task, but I don't know where to access last login information.
Any suggestions or pointers in the right direction would be appreciated. Thanks in advance.