Showing posts from July, 2020

Clean up duplicate identities and users from Workspace ONE using REST API's and PowerShell

Workspace ONE gives us a centralized management plane for our users digital workspace. But with the proliferation of identity and access management solutions, it isn't uncommon to find users with multiple identities in our management plane. Especially when you lift and shift from one identity solution to the next. 
I have a friend and colleague who is working with a beverage company who have a fairly tedious task ahead of them. They have to clean up duplicate identities, and do it quickly. I thought it would be great to share a solution I put together, and discuss how you can go about cleaning up identities in your environment as well.
But before we get to the good stuff; some mood lifting visual stimuli...

A lot of organizations start with Workspace ONE by importing identities using LDAP integration with Workspace ONE. This is pretty simple as it uses a BIND account to talk to a single directory over port 636 or 3269 (securely), or unsecured over port 389 or 3268. But eventually org…