Notes domains
In One Identity Manager, a domain corresponds to the image of a specific area in IBM Notes, such as an operational IBM Notes system. Using this construction, which is far more stringently handled in One Identity Manager than in IBM Notes, it is possible to manage several productive IBM Notes environments in parallel using a One Identity Manager database. Even if a user's relation to their domain is not maintained in IBM Notes, One Identity Manager is capable of assigning the domain to each user account and thus to separate environments.
NOTE: The Synchronization Editor sets up the domains in the One Identity Manager database.
To edit master data for a domain
- Select the IBM Notes | Domains category.
- Select the domain in the result list.
- Select the Change master data task.
- Edit the domain's master data.
- Save the changes.
General master data for a Notes domain
Enter the following data on the General tab.
Table 23: General master data for a Notes domain
| Full name |
Full domain name. |
| Display name |
The display name is used to display the domain in the user interface. |
|
Account definition (initial) |
Initial account definition for creating user accounts. This account definition is used if automatic assignment of employees to user accounts is used for this domain and if user accounts are to be created that are already managed (Linked configured). The account definition's default manage level is applied.
User accounts are only linked to the employee (Linked state) if no account definition is given. This is the case on initial synchronization, for example. |
| Target system managers |
Application role in which target system managers are specified for the domain. Target system managers only edit the objects from domains that are assigned to them. Each domain can have different target system managers assigned to it.
Select the One Identity Manager application role whose members are responsible for administration of this domain. Use the  button to add a new application role. |
| Synchronized by |
Type of synchronization through which data is synchronized between the domain and One Identity Manager. You can no longer change the synchronization type once objects for these domains are present in One Identity Manager.
If you create a domain with the Synchronization Editor, One Identity Manager is used.
Table 24: Permitted values
|
One Identity Manager |
IBM Notes connector |
IBM Notes connector |
|
No synchronization |
none |
none |
NOTE: If you select No synchronization, you can define custom processes to exchange data between One Identity Manager and the target system. |
| User ID file path |
Path of the gateway server used for creating new user ID files. This data is only required if the TargetSystem | NDO | StoreIDInAddressbook configuration parameter is not set. |
| Description |
Text field for additional explanation. |
| ID vault enabled |
Specifies whether IBM Notes ID vault function is used to restore user ID files. |
Related topics
Specifying categories for inheriting Notes groups
In One Identity Manager, groups can be selectively inherited by user accounts. For this purpose, the groups and the user accounts are divided into categories. The categories can be freely selected and are specified using a mapping rule. Each category is given a specific position within the template. The template contains two tables; the user account table and the group table. Use the user account table to specify categories for target system dependent user accounts. In the group table enter your categories for the target system-dependent groups. Each table contains the Position 1 to Position 31 category positions.
To define a category
-
In the Manager, select the domain in the IBM Notes | Domains category.
- Select the Change master data task.
- Switch to the Mapping rule category tab.
- Extend the relevant roots of the user account table or group table.
- To enable the category, double-click
.
- Enter a category name of your choice for user accounts and groups in the login language that you use.
- Save the changes.
Detailed information about this topic
How to edit a synchronization project
Synchronization projects in which a domain is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.
NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.
To open an existing synchronization project in the Synchronization Editor:
- Select the IBM Notes | Domains category.
- Select the domain in the result list. Select the Change master data task.
- Select the Edit synchronization project... task.
Related topics
