Post by Mysta
I may not have a grasp on fundamentally how JNDI works, but would it be possible to use JNDI to modify an account directly instead of a person record?(Under accounts instead of person)
No - ITIM does not allow that. It is using a different mechanism called "unsolicited notification events" - there a some very sketchy details around this process available in the examples and in e.g. the AD Adapter documentation where it is referenced as "event based reconciliation" IIRC.
Unless you are really REALLY willing to spend a lot of time in a very undocumented area of ITIM I would advice you to stick to the normal reconciliation processes and use event based only for those adapters that supports this OOB. But what you can do is to setup e.g. an AD Adapter and study what is send back to ITIM (and how) you should be bl to deduct the mechanism - but this is very close to unsupported land (and definitely not well documented).