Quick Connect for AS400 1.4 - Installation and Configuration Guide

Example – creating a workflow

This example demonstrates how to create a workflow from Active Directory^® to your IBM AS/400^®.

Provisioning (groups)

To synchronize Active Directory^® groups to the IBM AS/400^®

1. Navigate to the Workflow tab on the main menu.

2. Click Add workflow.

3. Enter a description for your workflow, for example Sync Active Directory to AS/400.

4. Click the Sync Active Directory to AS/400 workflow step hyperlink.

5. Click Add synchronization step.

6. Click Provision and then click Next.

7. From the Source connected system section, click Specify….

8. A new wizard starts.

9. Select your Active Directory Connector and click Finish.

10. The Active Directory source object type: is currently set to User (user). Change this to Group (group) by entering the word group.

11. Specify any Specific Provision Criteria, for example only members of a specific OU are synchronized.

12. Click Next.

13. In the Target connected system: field, click Specify…, and then locate your AS/400 connector and click Finish.

14. The object type in the Target object system field should be prefilled by One Identity Quick Connect to os400-usrprf.

15. Click Next.

16. In the Specify provisioning rules section, click Attribute.

17. In the Source attribute: field, click Select…, locate sAMAccountName and click OK.

18. In the Target attribute: field, click Attribute, then Select, locate os400-profile and click OK. (*)

19. Click OK.

20. Specify an initial password for the newly created group.

21. Click Finish to complete this synchronization step.

Provisioning (users)

To synchronize the Active Directory^® users to the IBM AS/400^®

1. Navigate to the Workflow tab.

2. Click Add synchronization.

3. Click Provision and then Next.

4. From the Source connected system section, click Specify….

5. A new wizard starts.

6. Select your Active Directory Connector and click Finish.

7. The Active Directory source object type: is currently set to User (user). Do not change this value.

8. Specify any Specific Provision Criteria, for example only members of a specific OU are synchronized.

9. Click Next.

10. In the Target connected system: field, click Specify…, and then locate your AS/400 connector and click Finish.

11. The object type in the Target object system field is prefilled by One Identity Quick Connect to os400-usrprf.

12. Click Next.

13. In the Specify provisioning rules section, click Attribute.

14. In the Source attribute: field, click Select… locate sAMAccountName and click OK.

15. In the Target attribute: field, click Attribute, then Select, locate os400-profile and click OK. (*)

16. Click OK.

17. Specify an initial password for the newly created group.

18. Click Finish to complete this synchronization step.

When you have successfully completed the steps in Provisioning (groups) and Provisioning (users), all new users or groups in your Active Directory system will be synchronized using One Identity Quick Connect to your AS/400 server.

Updating (groups)

To synchronize users Active Directory^® attribute(s) group membership to the IBM AS/400^®

1. Navigate to the Workflow tab.

2. Click Add synchronization step.

3. Click Update and then click Next.

4. From the Source connected system section, click Specify….

5. A new wizard starts.

6. Select your Active Directory Connector and click Finish.

7. The source object type: is currently set to User (user). Change this to Group (group) and click OK.

8. Specify any Updating Criteria, for example only members of an OU are synchronized.

9. Click Next.

10. In the Target connected system section, click Specify…, and then locate your AS/400 connector.

11. Click Finish.

12. The Target object type is prefilled by One Identity Quick Connect to os400-usrprf.

13. Click Next.

14. In the Specify updating rules section, click the Attribute. (*)

15. The Direct Synchronization screen is displayed. In the Source attribute: section, click Select, locate member and click OK.

16. The Target attribute: field is automatically set to os400-groupmember.

17. Click OK.

18. Click Finish to complete this synchronization step.