Enter the following general main data.
Table 16: General main data of a domain
|
Domain |
Name of OneLogin the domain. This corresponds to the <subdomain> part of the DNS name. |
| Display name |
Name used to display the domain in the user interface. This is preset with the domain name; however, the display name can be changed. |
| DNS name |
Full DNS name.
Example:
<subdomain>.onelogin.com |
|
Account definition (initial) |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of identities to user accounts is used for this domain and if user accounts are to be created that are already managed (Linked configured). The account definition's default manage level is applied.
User accounts are only linked to the identity (Linked) if no account definition is given. This is the case on initial synchronization, for example. |
|
Target system managers |
Application role in which target system managers are specified for the domain. Target system managers only edit the objects from domains that are assigned to them. Therefore, each domain can have a different target system manager assigned to it.
Select the One Identity Manager application role whose members are responsible for administration of this domain. Use the  button to add a new application role. |
|
Synchronized by |
Type of synchronization through which the data is synchronized between the domain and One Identity Manager. You can no longer change the synchronization type once objects for these domains are present in One Identity Manager.
If you create a domain with the Synchronization Editor, One Identity Manager is used.
Table 17: Permitted values
|
One Identity Manager |
OneLogin connector |
OneLogin connector |
|
No synchronization |
None |
None |
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. |
|
Description |
Text field for additional explanation. |
Related topics
In One Identity Manager, user accounts can selectively inherit roles. To do this, the roles and user accounts are divided into categories. The categories can be freely selected and are specified using a mapping rule. Each category is given a specific position within the template. The mapping rule contains different tables. Use the user account table to specify categories for target system dependent user accounts. In the other tables, enter your categories for the roles. Each table contains the category positions position 1 to position 63.
To define a category
-
In the Manager, select the domain in the OneLogin > Domains category.
-
Select the Change main data task.
-
Switch to the Mapping rule category tab.
-
Extend the relevant roots of a table.
-
To enable the category, double-click 
.
-
Enter a category name of your choice for user accounts and entitlements in the login language that you use.
- Save the changes.
Detailed information about this topic
Synchronization projects in which a domain is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.
NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.
To open an existing synchronization project in the Synchronization Editor:
-
In the Manager, select the OneLogin > Domains category.
-
Select the domain in the result list. Select the Change main data task.
-
Select the Edit synchronization project task.
Related topics
Use this task to obtain an overview of the most important information about a domain.
To obtain an overview of a domain
-
In the Manager, select the OneLogin > Domains category.
-
Select the domain in the result list.
-
Select the OneLogin domain overview task.
