Is there any capability in OIM (11gR1+) to find out who locked/unlocked a user account, or more generally who updated a user? We have many users who have limited access to OIM Admin Console, and one of the operations they routinely do is lock/unlock accounts. We would like to track these changes since its required for audit purposes.
I have looked at the canned reports that come with OIM, and there is one that reports on 'Unlock' operations. But this report has limitations. It does not report on 'Lock' operations, nor does it tell you who performed the operation.