Starling Connect Hosted - One Identity Manager Administration Guide

This section describes the procedure to create multi-valued custom fields in One Identity Manager.

To create multi-valued custom fields in One Identity Manager

Create a custom column in the respective User tables in the database.
1. Create a custom column in CSMUser table.
  To create a custom column in CSMUser table
  1. Open SchemaExtension. exe.
  2. In the Select Method window, select Extend table and click Next.
  3. In the Extend table window, select CSMUser table and click Next.
  4. In the Configure columns window, click Create New column (+).
  5. In the Create new column window, enter a name for the column. For example: RolesID.
  6. Enter a display name for the column to be displayed in Manager.exe.
  7. In the Configure columns window, select the data type as string from the Data type list and click Next.
  8. In the Access permissions window, add appropriate permissions and click Next.
  9. Click Finish after the compilation is done.
  10. Repeat the steps for all custom columns that you have to create. For example: RolesName, WorkspaceID, and WorkspaceName.
2. Create a custom column in UCIUser table.
  
  To create a custom column in UCIUser table
  1. Repeat the steps that you performed for creating a custom column in CSMUser table.
  2. Ensure that you use the same column name and other details used when you created a custom column in CSMUser table.
Change the created custom column to multi-value in both the tables.
1. Change the created column in CSMUser table to multi-value.
  
  To change the created column in CSMUser table to multi-value
  1. Open Designer.exe.
  2. Select One Identity Manager Schema in the left pane.
  3. Click Show Table Definition.
  4. Select CSMUser.
  5. Select the created custom column.
  6. Select the More tab.
  7. Select multi-value column and click Finish.
  8. Select Commit to database.
  9. Select Compile Database.
2. Change the created column in UCIUser table to multi-value.
  
  To change the created column in UCIUser table to multi-value, repeat the steps that you performed for CSMUser table.
Create custom mappings and add directions accordingly.
1. Add mappings for each custom field created.
2. Add the mapping directions accordingly.

Synchronization and assignment of PermissionSets to Users with One Identity Manager

Creating mapping for PermissionSets using Synchronization Editor

This section describes the procedure to create mapping for PermissionSets.

To create mapping for PermissionSets

Open the Synchronization Editor tool.
Open the specific synchronization project.
Navigate to Configuration | One Identity Manager Connection |Update Schema.
Activate the project.
Navigate to the Mappings tab and click + to create a mapping.
In the New mapping window:
1. In the General section, enter the values in the fields as shown in the table
  
  Table 470: Create new mapping for PermissionSets - General section
  
  Field Value
  
  Mapping name PermissionSets
  
  Mapping direction Both directions
  
  NOTE: Select the option Maps objects referenced by multiple references.
2. In the Relation section, enter the values in the fields as shown in the table
  Table 471: Create new mapping for PermissionSets - Relation section
  
  Field Value
  
  One Identity Manager schema class PermissionSets
  
  Target system schema class PermissionSets(all)
3. Click Ok and click Next.
In the Mapping Wizard:
1. In the Select task section, select the template Create rules based on template, click Next.
2. In the Select source mapping section, select Group and click Next.
3. Verify the Analysis Result and click Next and then click Finish.
To add the virtual parameter
1. Select Mappings| PermissionSets .
2. Select + to create a property.
3. In the Create property window, from the Property type list, select Members of M:N schema types .
4. Enter the following values, for example, in the fields mentioned in the table, and select the options listed below:
  Table 472: Virtual parameters
  
  Field/ Option Value
  
  Name vrtUser
  
  Display name vrtUser
  
  Select the following options, below the Display name field, according to your requirements:
  - Ignore case
  - Try to mark the objects for deletion (outstanding)
5. Click + to add the schema type.
6. Select the Member key properties for Group as listed in the table below
  
  Table 473: Member key properties
  
  Entity Value
  
  M:N schema type
  UCIUserHasItem
  
  UID_UCIItem
  
  UID_UCIUser
  
  Primary key property
  
  OjectGUID
7. Click Ok.
8. Add a new mapping rule Value Comparison Rule with vrtUser <--> members~value.
9. Run the synchronization.

Creating a Process Chain using Designer

Table 470: Create new mapping for PermissionSets - General section
Field	Value
Mapping name	PermissionSets
Mapping direction	Both directions

Table 471: Create new mapping for PermissionSets - Relation section
Field	Value
One Identity Manager schema class	PermissionSets
Target system schema class	PermissionSets(all)

Table 472: Virtual parameters
Field/ Option	Value
Name	vrtUser
Display name	vrtUser

Table 473: Member key properties
Entity	Value
M:N schema type	UCIUserHasItem
UID_UCIItem
UID_UCIUser
Primary key property	OjectGUID

This section describes the procedure to create a Process Chain using Designer.

To create a Process Chain using Designer

Open the Designer tool.
In the Navigation pane, select Process Orchestration |Custom process| Navigation| Process Editor| Create a new process.
The Process properties window is displayed.

In the General tab of the Process properties window, enter the following values:

Table 474: Values for creating custom process for PermssionSets
Process properties	Value
Name	UCI_UCIPermissionSethasItem_Update
Table	UCIUserHasItem
Pre-script for generating	If Not CBool(Connection.Variables("FULLSYNC")) AndAlso _ Not CBool(Connection.Variables("PendingChangeReady")) AndAlso _ Not $FK(UID_UCIItem).FK(UID_UCIRoot).IsManualProvisioning:Bool$ Then Imports System.Collections.Generic Dim data As IDictionary(Of String,string) = Nothing values("AdHocDataFound") = False values("NeedExecute") = true ' try to get UCI data Try Dim myUCIItem As ISingleDbObject = Connection.CreateSingle("UCIItem",$UID_UCIItem$) data = DPR_GetAdHocData($FK(UID_UCIItem).FK(UID_UCIRoot).XObjectKey$,"SCIM","","Update",myUCIItem.GetEntity()) Catch ex As AdHocDataException End Try If Not data is Nothing values("AdHocDataFound") = True values("ObjectKey") = New DbObjectKey("UCIItem",$UID_UCIItem$).ToXmlString() values("UID_DPRSystemVariableSet") = data("VariableSetUID") values("UID_DPRProjectionConfiguration") = data("ProjectionConfigUID") values("UID_QBMServer") = UCI_GetProvisioningServer(data("ExecutionServerUID"), Entity, data("ExecutionServerTag")) End if
Generating condition	Value = Not CBool(Connection.Variables("FULLSYNC")) AndAlso _ Not CBool(Connection.Variables("PendingChangeReady")) AndAlso _ Not $FK(UID_UCIItem).FK(UID_UCIRoot).IsManualProvisioning:Bool$ AndAlso _ CBool(values("AdHocDataFound")) Andalso _ UCI_TargetUsesProfiles($FK(UID_UCIItem).UID_UCIRoot$)

In the Events tab, at the bottom of the page, click +.
The Edit event window is displayed.
In the Edit event window, click + next to the Object Event field.

The Edit object event window is displayed.
In the Edit object event, select Delete and then Insert from the list. Click OK.
The Process step properties window is displayed.
In the Process step properties window, select the values as follows:
1. In the General tab, in the Name field, enter the value PUT/PATCH Group.
2. Select ProjectorComponent – AdHocProjectionSingle from the Process Task drop down list.
3. In the Generation tab, enter the script for server selection: Value = values("UID_QBMServer").ToString().
4. In the Error Handling tab, select Stop on Error.
In the Parameters tab at the bottom, add the values for ForceSyncOf: Value = "UID_UCIUser,vrtProfilesArr,vrtUser".
Set the parameter CausingEntityPatch to the following value:
Dim myUCIItem As ISingleDbObject =
Connection.CreateSingle("UCIItem",$UID_UCIItem$)
Value = DPR_WrapObjectForProjection(myUCIItem.GetEntity())
The custom process UCI_UCIPermissionSethasItem_Update is created for PermissionSets.
Click Commit to Database.
Select Database| Compile Database in the Designer tool.

Veuillez sélectionner votre produit

Afin de mieux répondre à vos besoins, précisez l'objet du tchat:

Solutions recommandées pour votre problème

Starling Connect Hosted - One Identity Manager Administration Guide

Creating multi-valued custom fields in One Identity Manager

Synchronization and assignment of PermissionSets to Users with One Identity Manager

Creating mapping for PermissionSets using Synchronization Editor

Creating a Process Chain using Designer