community 
On Portal server, record successful logins with SSO attributes in a file that can be easily processed
If SSO login is configured & used, the users can be automatically created in Quali DB. They can be placed into the groups based on rules defined in file "sso_group_rules.config.json". All good!
Problem: If the move from one department to another, we want users to be moved to a different group on Quali server. Automatically.
I think that the process of user 'reclassification' is very specific to every organization using Quali SW, and we do not expect Quali to write code to satisfy customer's complex business rules related to the user group membership.
We would like to have new functionality:
- on the Portal server
- for every successful login, SSO or local authentication
- write to local file: timestamp, username, all available SSO attributes
- if plain text files are used to store these records, make possible to rotate them
When this function is available, we can write our own code to periodically read the file, and put users into the right groups, set max reservation time, send them email notification, etc.
An assumption here is that user SSO attributes are enough to make decisions about moving user from one group to another.
Records about local authentication are not necessary for this functionality, but if records are written make sense to include these, too.
