The following configuration parameters are additionally available in One Identity Manager after the module has been installed.
Configuration parameter | Description |
---|---|
TargetSystem\AzureAD |
Preprocessor relevant configuration parameter for controlling the database model components for the administration of the target system Azure Active Directory. If the parameter is set, the target system components are available. Changes to the parameter require recompiling the database. |
TargetSystem\AzureAD\Accounts |
This configuration parameter permits configuration of user account data. |
TargetSystem\AzureAD\Accounts\ |
This configuration parameter specifies whether a random generated password is issued when a new user account is added. The password must contain at least those character sets that are defined in the password policy. |
TargetSystem\AzureAD\Accounts\ |
This configuration parameter specifies to which employee the email with the random generated password should be sent (manager cost center/department/location/role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the configuration parameter "TargetSystem\AzureAD\DefaultAddress". |
TargetSystem\AzureAD\Accounts\ |
This configuration parameter contains the name of the mail template sent to inform users about their initial login data (name of the user account). Use the mail template "Employee - new account created". |
TargetSystem\AzureAD\Accounts\ |
This configuration parameter contains the name of the mail template sent to inform users about their initial login data (initial password). Use the mail template "Employee - initial password for new user account". |
TargetSystem\AzureAD\Accounts\ MailTemplateDefaultValues |
This configuration parameter contains the mail template used to send notifications if default IT operating data mapping values are used for automatically creating a user account. Use the mail template "Employee - new user account with default properties created". |
TargetSystem\AzureAD\Accounts\ PrivilegedAccount |
This configuration parameter allows configuration of settings for privileged Azure Active Directory user accounts. |
TargetSystem\AzureAD\Accounts\ |
This configuration parameter contains the postfix for formatting login names for privileged user accounts. |
TargetSystem\AzureAD\Accounts\ PrivilegedAccount\ AccountName_Prefix |
This configuration parameter contains the prefix for formatting login names for privileged user accounts. |
TargetSystem\AzureAD\DefaultAddress |
The configuration parameter contains the recipient's default email address for sending notifications about actions in the target system. |
TargetSystem\AzureAD\ |
This configuration parameter contains the maximum runtime for synchronization. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated. |
TargetSystem\AzureAD\ |
This configuration parameter specifies the mode for automatic employee assignment for user accounts added to the database outside synchronization. |
TargetSystem\AzureAD\ |
This configuration parameters specifies whether employees are automatically assigned to disable user accounts. User accounts do not obtain an account definition. |
TargetSystem\AzureAD\ |
This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization. |
TargetSystem\AzureAD\ |
List of all user accounts for which automatic employee assignment should not take place. Names given in a pipe (|) delimited list that is handled as a regular search pattern. Example: ADMINISTRATOR |
A default project template ensures that all required information is added in the One Identity Manager. This includes mappings, workflows and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.
Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the .Synchronization EditorOne Identity Manager tool for configuring target system synchronization.
The template uses mappings for the following schema types.
Schema type |
Table in the One Identity Manager schema |
---|---|
DirectoryRole | AADDirectoryRole |
Group | AADGroup |
LicenseAssignments | AADUserHasSubSku |
Organization | AADOrganization |
ServicePlans | AADServicePlan |
SubscribedSku | AADSubSku |
User | AADUser |
Verified Domain | AADVerifiedDomain |
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy