Some system connectors provide which you can use to configure a complete with the project wizard, The add the following components to the synchronization configuration in the synchronization project, depending on the target system type.
- The scope
- A start up configuration (without )
- The default variable set
- A base object
The synchronization base object, e.g. the actual Active Directory domain that you want to synchronize, is added as an object in the One Identity Manager database.
- A for the initial import of the target system into the One Identity Manager database
The workflow has the following characteristics:
- Direction of synchronization is "One Identity Manager".
- Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
- A
This workflow is only created if the Read/write access to target system. available. option is selected on the Restrict target system access page of the project wizard.
The workflow has the following characteristics:
- Synchronization in the direction of the "".
- Processing methods are only defined in the synchronization steps in synchronization direction "Target system".
- Synchronization steps are only created for such schema classes whose schema types have write access.
- The schema classes required
- Mappings for all schema classes required
These include:
- Required virtual schema properties
- Property mapping rules
- Object matching rules
Also created is:
Once a synchronization project has been created from a project template, you can check the settings assign a schedule and start synchronization.
When you set up a with the project wizard, you decide whether the target system is only read in or whether One Identity Manager can also make changes. If you select the has read-only access option, only modifications in the target system are transferred to the One Identity Manager database. Changes in the One Identity Manager database are not written to the target system. This means:
- Direction of synchronization is "One Identity Manager".
- The project wizard only creates one . A is not added.
- Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
Related topics
Not all system connectors provide a for creating a full configured . Therefore, you can also create a synchronization project manually. In this case, the project wizard sets up the system connection. All other synchronization configuration components must be configured after you have saved the synchronization project.
To manually set up synchronization of the One Identity Manager database with a target system
- Install and configure a and declare the server as a Job server in One Identity Manager.
- Create a new synchronization project.
- The project wizard sets up the system connection.
- On the Select project template page, select Create blank project.
-
Add mappings. Define property mapping rules and object matching rules.
-
Create .
-
Create a start up configuration.
-
Define the synchronization scope.
-
Specify the base object of the synchronization.
-
Specify the extent of the synchronization log.
-
Run a consistency check.
-
Activate the synchronization project.
-
Save the new synchronization project in the database.
Detailed information about this topic
group together the rules used to map the schema properties of two . For this, a schema class is created for every schema type which requires mapping. A schema class limits the result list of a schema type through defined filer criteria. A mapping maps schema properties from exactly one target system schema class to the schema properties of exactly one schema class in the One Identity Manager schema. A schema class without a filter condition represents the schema type.
Property mapping rules describe how the target system schema properties are mapped in the One Identity Manager schema. Object matching rules assign schema properties through which system objects can be uniquely identified. For example, Active Directory groups can be uniquely identified by the schema properties DistinguishedName and ObjectGUID.
You specify in the mapping, which is permitted for the connected schema classes. Furthermore, you can also specify the permitted mapping direction for individual property mapping rules.
Default mappings for are added if the was created with a default . You can edit or delete these mappings or create new mappings. If the synchronization project was created without a project template, no mappings are set up.
The schema property mapping is edited with the mapping editor.
Detailed information about this topic
