Created Domino Person documents are not visible to the Identity Manager Domino connector (4373255)

Created Domino Person documents are not visible to the Identity Manager Domino connector

Newly created Domino Person document may sometimes not be immediately visible to the Identity Manager (1IM) Domino connector.

An example scenario:

Create a new Person document, either directly in the target system or in Identity Manager (as user account).  Shortly after this, run a full synchronization in direction to 1IM.  Sometimes those new Person documents are not immediately visible to the 1IM Domino connector.  This can lead to various side-effects, such as the user account, created in 1IM is being marked as outstanding and/or new group memberships are not added for the user.

The search of newly created objects of type "Person" from the 1IM Domino connector requires an updated full text index on the Domino Directory.

The index is updated at configured time intervals.  The value "Immediate" is the shortest interval and should be used, however, there are known versions of the Domino Server which delay the execution of the reindexing to up to 15 minutes.  Moreover, if creation of a new Person document was initiated in Identity Manager, the 1IM Domino connector will not start reindexing immediately after provisioning a new user.  Starting reindexing would be unreasonable, especially when creating and provisioning multiple users at once.

The 1IM Domino connector will update the view "$Users" in this case only.  Hence, if a full synchronization will start before reindexing the full text index has been completed, the 1IM Domino connector would not be able to find the new Person document.

The full text index update interval should be configured as "Immediate" on the Domino Directory.  This should take care of a timely update of the index.  If this did not occur for some reason, the first full synchronization may not be able to find the new Person documents.

The explanation for this is that the first full sync’s reindexing will be initiated before reading Person documents.  The synchronization process will currently wait only 15 seconds and if reindexing lasts longer, the first full sync would not find some new objects, but the later executed full sync process will find the missing objects.  This is because the reindexing started by the first full sync should be already completed.

Alternatively, manually executing reindexing on the server console before starting full sync will also resolve the issue.  For this, execute the following console command: load updall names.nsf -F