Add IdLE.Step.PruneEntitlements and IdLE.Step.PruneEntitlementsEnsureKeep — bulk entitlement convergence with provider optimizations#237

Merged

ntt-matthias-fleschuetz merged 29 commits intomainfrom

copilot/add-idle-step-prune-entitlements

Mar 1, 2026

Commits on Feb 24, 2026

Initial plan
Copilot
committed
Add IdLE.Step.PruneEntitlements with tests, capability, provider updates and docs"

Copilot
and
blindzero
committed
Fix Condition placement and step name in AD leaver template

Copilot
and
blindzero
committed
Add dedicated adapter PruneGroupMemberships + provider PruneEntitlements with ID normalization; simplify step loop

Copilot
and
blindzero
committed
Refactor: step is single delta-computation source; add NormalizeEntitlementId to AD/Entra providers; enhance AD NormalizeGroupId with GUID/DN/sAMAccountName fallbacks; remove PruneGroupMemberships …

Copilot
and
blindzero
committed
Split PruneEntitlements into two step types: PruneEntitlements (remove-only) and PruneEntitlementsEnsureKeep (remove + ensure keep); fix capability requirements; update registry, manifest, docs, te…

Copilot
and
blindzero
committed

Commits on Feb 25, 2026

Commits on Feb 27, 2026

Commits on Feb 28, 2026

Commits on Mar 1, 2026