Before storing/propagating/synchronizing a specific user or role, a pre-processor can be called in order to allow any kind of manipulation before any actual operation takes place.
I've a keen interest in IAM solution also because I think that my first qualification is simply: IAM specialist. Today, googling idm open source I noticed that the first result occurrence (also in paid search results) is openiam identity manager, so, out of curiosity, I decided to install it.
Asking for a large set of results via ldapsearch to an Active Directory (AD) you will get a "size limit exceeded" error message. Searches of Active Directory performed without paging are limited to returning a maximum of the first 1000 records.
There are lots of ways of documenting RESTful APIs in Java: just google a bit and you will find the nice Enunciate and Swagger, for example. Such approachs, however, are often quite invasive and hardly customizable. Many providers - like as Apache CXF - are able to dynamically generate a WADL representation out of JAX-RS annotated classes: such XML representation can be easily put into an XSLT transformation in order to obtain some end-user REST documentation.