Provisioning: Entity Attribute and responsibility for a prefix

Our Grouper's Ldap-Entity-attribute provisioning share entitlement attributes with other systems. We are having pretty constant problems getting values removed and have tried to raise the level of Grouper responsibility to "Delete if value managed by Grouper." We had hoped that this would scrub extra values from users who were not in the groups provisioned by grouper.

As you might imagine from this Jira, we continue to have problems with extra attributes remaining in our ldap. Chad Redman should be posting a Jira about this.

This Jira is requesting that we be able to define an attribute-value prefix to define value 'ownership.' For example, we would define prod grouper being responsible for gt: and Test being responsible for test:gt:. This might simplify the code and fix our current problems, but it might also help when groups are deleted from grouper or, perhaps, unmarked for provisioning.

ATM, we're going to have to manually scrub these attributes in an oob script.