Question:
When a user is added to a group in the Identity Vault (IDV), the change is synchronized from the IDV to Lotus Notes, and you can view the Group in Lotus Notes, and it shows that the user has been added. However, if you attempt to send an email to that Group in Lotus Notes, the user is not included; meaning the change has not been fully recognized by Lotus Notes.
But, when a Notes Admin opens the group for editing and then closes (making no changes), the user will now receive emails sent to the group.
Any ideas on what could be causing this? Or, how to correct this?
Answer:
By default, the IDM Driver for Lotus Notes only attempts to write data that is provided within the operation commands it receives. This is different from how a Notes (Administrator) client will apply data to a Notes database. A Notes client will always update a Notes document according to the data form it is given. Thus when the group mentioned in the above question is opened and closed by the Notes client, the form data is applied, and the desired effect is visible. To overcome this difference in operation between the IDM Driver for Lotus Notes and the typical Notes client, use an IDM driver policy to add the custom parameter (xml attribute) 'compute-with-form="true"' to the modify group operation. You can read the docs (http://www.novell.com/documentation/idm36drivers/notes/?page=/documentation/idm36drivers/notes/data/abq9rdv.html) about this custom parameter, but in general, this 'compute-with-form="true"' parameter somewhat simulates your description of "a Notes Admin opens the [object] for editing and then closes (making no changes)" in an automated fashion.
