Hi Jerry,
That's the scripting idea I had, but I'm hoping to find a way to do it without scripting. In any case I'm going to have to think this through and put something together for the SAP IDM Idea place. This is a scenario that I see all too often and I can never give people a "best practices" approach that works. At the end of the day, I think IDM needs to be able to do this automatically since there are post employment scenarios where some form of Portal access is still required to get tax documents, retirement benefits, etc.
BTW, glad to see you're still watching the IDM Stuff BTW! 
Cheers,
Matt
