IDM Antipatterns and Best Practice

All of us know it: ideas that sounds great but they fail miserably. It is a common sight almost everywhere. But during last few months I've heard an unusual number of such ideas related to the Identity and Access Management solutions. I know that veteran IAM practitioners are probably already well aware of them, but it looks like there is a fresh batch of people that are relatively new to this field. Therefore I've taken the time to write some of them down:

https://wiki.evolveum.com/display/midPoint/Antipatterns

Even though the mistakes of the others is often a great fun I also wanted to add something positive. Therefore there are also these:

https://wiki.evolveum.com/display/midPoint/Best+Practice

(reposted from Evolveum blog)