Identity Manager 8.2 - Administration Guide for Connecting to a Universal Cloud Interface

NOTE: All editing options are also available in the Designer under Base Data > Installation > Job server.

The server function defines the functionality of a server in One Identity Manager. One Identity Manager processes are handled with respect to the server function.

NOTE: More server functions may be available depending on which modules are installed.

Table 45: Permitted server functions
Server function	Remark
Update server	This server automatically updates the software on all the other servers. The server requires a direct connection to the database server that One Identity Manager database is installed on. It can run SQL tasks. The server with the One Identity Manager database installed on it is labeled with this functionality during initial installation of the schema.
SQL processing server	It can run SQL tasks. The server requires a direct connection to the database server that One Identity Manager database is installed on. Several SQL processing servers can be set up to spread the load of SQL processes. The system distributes the generated SQL processes throughout all the Job servers with this server function.
CSV script server	This server can process CSV files using the ScriptComponent process component.
One Identity Manager Service installed	Server on which a One Identity Manager Service is installed.
SMTP host	Server from which One Identity Manager Service sends email notifications. Prerequisite for sending mails using One Identity Manager Service is SMTP host configuration.
Default report server	Server on which reports are generated.
Universal Cloud Interface connector	This server can connect to the Universal Cloud Interface Module.

Related topics

General main data of Job servers

Configuration parameters for managing cloud target systems

The following configuration parameters are additionally available in One Identity Manager after the module has been installed.

Table 46: Configuration parameters for managing cloud target systems
Configuration parameters	Meaning
TargetSystem \| CSM	Preprocessor relevant configuration parameter for controlling the database model components for the administration of the cloud target systems. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled. If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.
TargetSystem \| CSM \| Accounts	Allows configuration of user account data.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword	Specifies whether a random password is generated when a new user account is added. The password must contain at least those character sets that are defined in the password policy.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo	Employee to receive an email with the random generated password (manager cost center/department/location/business role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the TargetSystem \| CSM \| DefaultAddress configuration parameter.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplateAccountName	Mail template name that is sent to supply users with the login credentials for the user account. The Employee - new user account created mail template is used.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplatePassword	Mail template name that is sent to supply users with the initial password. The Employee - initial password for new user account mail template is used.
TargetSystem \| CSM \| Accounts \| MailTemplateDefaultValues	Mail template used to send notifications about whether default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount	Allows configuration of privileged user account settings.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount \| SAMAccountName_Postfix	Postfix for formatting the login name of privileged user accounts.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount \| SAMAccountName_Prefix	Prefix for formatting a login name of privileged user accounts.
TargetSystem \| CSM \| DefaultAddress	Default email address of the recipient for notifications about actions in the target system.
TargetSystem \| CSM \| MaxFullsyncDuration	Maximum runtime of a synchronization in minutes. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated.
TargetSystem \| CSM \| PersonAutoDefault	Mode for automatic employee assignment for user accounts added to the database outside synchronization.
TargetSystem \| CSM \| PersonAutoDisabledAccounts	Specifies whether employees are automatically assigned to disabled user accounts. User accounts are not given an account definition.
TargetSystem \| CSM \| PersonAutoFullSync	Mode for automatic employee assignment for user accounts that are added to or updated in the database by synchronization.
TargetSystem \| CSM \| PersonExcludeList	Listing of all user account without automatic employee assignment. Names are listed in a pipe (\|) delimited list that is handled as a regular search pattern. Example: ADMINISTRATOR\|GUEST\|KRBTGT\|TSINTERNETUSER\|IUSR_.\|IWAM_.\|SUPPORT_.\|. \| $

The following configuration parameters are also required.

Table 47: Additional configuration parameters
Configuration parameters	Meaning
QBM \| PendingChange	General configuration parameter for configuring pending changes.
QBM \| PendingChange \| LifeTimeError	This configuration parameter specifies the maximum retention period (in days) for failed provisioning processes. The default is 30 days.
QBM \| PendingChange \| LifeTimeRunning	This configuration parameter specifies the maximum retention period (in days) for open provisioning processes. The default is 60 days.
QBM \| PendingChange \| LifeTimeSuccess	This configuration parameter specifies the maximum retention period (in days) for successful provisioning processes. The default is 2 days.

Default project template for cloud applications in the Universal Cloud Interface

A default project template ensures that all required information is added in One Identity Manager. This includes mappings, workflows, and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.

Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the Synchronization Editor.

The project template uses mappings for the following schema types.

Table 48: Mapping Universal Cloud Interface schema types to tables in the One Identity Manager schema
Schema type in Universal Cloud Interface	Table in the One Identity Manager Schema
UCIRoot	CSMRoot
UCIContainer	CSMContainer
UCIGroup	CSMGroup
UCIGroupInGroup	CSMGroupInGroup
UCIGroupHasItem	CSMGroupHasItem
UCIGroup1	CSMGroup1
UCIGroup1InGroup1	CSMGroup1InGroup1
UCIGroup2	CSMGroup2
UCIGroup2InGroup2	CSMGroup2InGroup2
UCIGroup3	CSMGroup3
UCIGroup3InGroup3	CSMGroup3InGroup3
UCIItem	CSMItem
UCIUser	CSMUser
UCIUserInGroup	CSMUserInGroup
UCIUserInGroup1	CSMUserInGroup1
UCIUserInGroup2	CSMUserInGroup2
UCIUserInGroup3	CSMUserInGroup3
UCIUserHasGroup	CSMUserHasGroup
UCIUserHasGroup1	CSMUserHasGroup1
UCIUserHasGroup2	CSMUserHasGroup2
UCIUserHasGroup3	CSMUserHasGroup3
UCIUserHasItem	CSMUserHasItem
QBMPendingChange	QBMPendingChange
QBMPendingChangeDetail	QBMPendingChangeDetail

Configuration parameters	Meaning
TargetSystem \| CSM	Preprocessor relevant configuration parameter for controlling the database model components for the administration of the cloud target systems. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled. If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.
TargetSystem \| CSM \| Accounts	Allows configuration of user account data.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword	Specifies whether a random password is generated when a new user account is added. The password must contain at least those character sets that are defined in the password policy.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo	Employee to receive an email with the random generated password (manager cost center/department/location/business role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the TargetSystem \| CSM \| DefaultAddress configuration parameter.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplateAccountName	Mail template name that is sent to supply users with the login credentials for the user account. The Employee - new user account created mail template is used.
TargetSystem \| CSM \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplatePassword	Mail template name that is sent to supply users with the initial password. The Employee - initial password for new user account mail template is used.
TargetSystem \| CSM \| Accounts \| MailTemplateDefaultValues	Mail template used to send notifications about whether default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount	Allows configuration of privileged user account settings.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount \| SAMAccountName_Postfix	Postfix for formatting the login name of privileged user accounts.
TargetSystem \| CSM \| Accounts \| PrivilegedAccount \| SAMAccountName_Prefix	Prefix for formatting a login name of privileged user accounts.
TargetSystem \| CSM \| DefaultAddress	Default email address of the recipient for notifications about actions in the target system.
TargetSystem \| CSM \| MaxFullsyncDuration	Maximum runtime of a synchronization in minutes. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated.
TargetSystem \| CSM \| PersonAutoDefault	Mode for automatic employee assignment for user accounts added to the database outside synchronization.
TargetSystem \| CSM \| PersonAutoDisabledAccounts	Specifies whether employees are automatically assigned to disabled user accounts. User accounts are not given an account definition.
TargetSystem \| CSM \| PersonAutoFullSync	Mode for automatic employee assignment for user accounts that are added to or updated in the database by synchronization.
TargetSystem \| CSM \| PersonExcludeList	Listing of all user account without automatic employee assignment. Names are listed in a pipe (\|) delimited list that is handled as a regular search pattern. Example: ADMINISTRATOR\|GUEST\|KRBTGT\|TSINTERNETUSER\|IUSR_.\|IWAM_.\|SUPPORT_.\|. \| $

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager 8.2 - Administration Guide for Connecting to a Universal Cloud Interface

Specifying server functions

Related topics

Configuration parameters for managing cloud target systems

Default project template for cloud applications in the Universal Cloud Interface