I have two mappings that both have managed/user as the source.
I need to create a dependency in the order they’re reconciled – especially for creation.
The first one is an AD account and the second one is an application account where the AD entry must be present before the mapping is created, as the application’s user account creation process requires an AD entry be already present.
Is there a simple way to enforce that one mapping reconciliation must be completed before the other during user creation?
I’ve tried adding an onCreate script to the AD account mapping that creates the system object for the resource, but that doesn’t populate the linkage to the managed/user account.