Quick Connect for AS400 1.4 - Installation and Configuration Guide

Creating the One Identity Quick Connect mappings

You will need to create two mappings to enable user and group synchronization between Active Directory^® and the IBM AS/400^®.

For user synchronization

To create mappings for user synchronization

1. First define the IBM AS/400^® Connector as described in Adding a new AS/400 Connector, then click the Mapping tab.

2. Select the Active Directory Connector from the list.

3. Click Add mapping pair at the top of the screen.

4. A new wizard starts.

5. Your Active Directory connector is selected automatically.

6. Verify that the system object type is defined as User (user), and then click Next.

7. In the Target Connect system section, click Specify….

8. Select your AS/400 connector from the list.

9. Click Finish.

10. Verify that the system object type is os400-usrprf, then click Finish.

11. On the main Mapping screen, select your newly created pair.

12. Click Add mapping rule. The Define Mapping Rule wizard starts.

13. Click Attribute… for your Active Directory connector and select the sAMAccountName attribute for your Active Directory attribute.

14. Click OK.

15. Click Attribute… for your AS/400 connector and select the os400-profile attribute for your AS/400 attribute.

16. Click OK.

17. Click Map now.

For group synchronization

To create mappings for group synchronization

1. First define the IBM AS/400^® Connector described in Adding a new AS/400 Connector, and then click the Mapping tab.

2. Select the Active Directory Connector from the list.

3. Click Add mapping pair at the top of the screen.

4. A new wizard starts.

5. Your Active Directory connector is selected automatically.

6. Verify that the system object type is defined as Group (group), then click Next.

7. In the Target Connect system section, select Specify….

8. Select your AS/400 connector from the list.

9. Click Finish.

10. Verify that the system object type is os400-usrprf, then click Finish.

11. On the main Mapping screen, select your newly created pair.

12. Click Add mapping rule. The Define Mapping Rule wizard starts.

13. Click Attribute… for your Active Directory connector and select the sAMAccountName attribute for your Active Directory attribute.

14. Click OK.

15. Click Attribute… for your AS/400 connector and select the os400-profile attribute for your AS/400 attribute.

16. Click OK.

17. On the main Mapping screen, click Add mapping rule. The Define Mapping Rule wizard starts.

18. Click Attribute… for your Active Directory connector and select the member attribute for your Active Directory attribute.

19. Click OK.

20. Click Attribute… for your AS/400 connector and select the os400-groupmember attribute for your AS/400 attribute.

21. Click OK.

22. Click Map now.

When you have completed these steps, your mapping will be similar to the following example:

Creating a workflow

Workflows are designed for three key areas:

• Provision
• Update
• Deprovision

Provision – Creates objects in the target connected data systems based on the changes made to specific objects in the source connected system. When creating a new object, One Identity Quick Connect assigns initial values to the object attributes based on the attribute population rules you have configured.

Update – Changes the attributes of objects in the target connected data systems based on the changes made to specific objects in the source connected system. To define the objects that will participate in the update operation you can use object mapping rules.

Deprovision – Modifies or removes objects in the target connected data systems after their counterparts have been disconnected from the source connected system. One Identity Quick Connect can be configured to remove objects permanently or change them to a specific state.