Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to G Suite

Managing G Suite Setting Up G Suite Synchronization Base Data for Managing G Suite Troubleshooting Appendix: Configuration Parameter for Managing G Suite Appendix: Default Project Templates for G Suite Appendix: Editing System Objects

Appendix: Configuration Parameter for Managing G Suite

Appendix: Configuration Parameter for Managing G Suite

The following configuration parameters are additionally available in One Identity Manager after the module has been installed.

Table 26: Configuration Parameters for Synchronizing G Suite

Configuration Parameter

Meaning if Set

TargetSystem\GoogleApps

Preprocessor relevant configuration parameter for controlling the database model components for the administration of the target system G Suite. If the parameter is set, the target system components are available. Changes to the parameter require recompiling the database.

TargetSystem\GoogleApps\Accounts

Parameter for configuring G Suite user account data.

TargetSystem\GoogleApps\Accounts\ InitialRandomPassword

This configuration parameter specifies whether a random generated password is issued when a new user account is added. The password must contain at least those character sets that are defined in the password policy.

TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo

Specifies to which employee the email with the random generated password should be sent (manager cost center/department/location/role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the configuration parameter "TargetSystem\GoogleApps\DefaultAddress".

TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo\ MailTemplateAccountName

This configuration parameter contains the name of the mail template sent to inform users about their initial login data (name of the user account). Use the mail template "Employee - new account created".

TargetSystem\GoogleApps\Accounts\ InitialRandomPassword\SendTo\ MailTemplatePassword

This configuration parameter contains the name of the mail template sent to inform users about their initial login data (initial password). Use the mail template "Employee - initial password for new user account".

TargetSystem\GoogleApps\Accounts\ MailTemplateDefaultValues

This configuration parameter contains the mail template used to send notifications if default IT operating data mapping values are used for automatically creating a user account. Use the mail template "Employee - new user account with default properties created".

TargetSystem\GoogleApps\Accounts\ PrivilegedAccount

This configuration parameter allows configuration of settings for privileged user accounts.

TargetSystem\GoogleApps\Accounts\ TransferJPegPhoto

This configuration parameter specifies whether changes to the employee's picture are published in existing G Suite user accounts. The picture is not part of default synchronization. It is only published when employee data is changed.

TargetSystem\GoogleApps\ DefaultAddress

The configuration parameter contains the recipient's default email address for sending notifications about actions in the target system.

TargetSystem\GoogleApps\ MaxFullsyncDuration

This configuration parameter contains the maximum runtime for synchronization. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated.

TargetSystem\GoogleApps\ PersonAutoDefault

This configuration parameter specifies the mode for automatic employee assignment for user accounts added to the database outside synchronization.

TargetSystem\GoogleApps\ PersonAutoDisabledAccounts

This configuration parameters specifies whether employees are automatically assigned to disable user accounts. User accounts do not obtain an account definition.

TargetSystem\GoogleApps\ PersonAutoFullsync

This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization.

TargetSystem\GoogleApps\ PersonExcludeList

List of all user accounts for which automatic employee assignment should not take place. Names given in a pipe (|) delimited list that is handled as a regular search pattern.

Appendix: Default Project Templates for G Suite

Appendix: Default Project Templates for G Suite

A default project template ensures that all required information is added in the One Identity Manager. This includes mappings, workflows and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.

Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the .Synchronization EditorClosed

The template uses mappings for the following schema types.

Table 27: MappingClosed G Suite schema types to tables in the One Identity Manager schema.
SchemaClosed Type in G Suite Table in the One Identity Manager Schema
AdminPrivilege GAPPrivilege
AdminRole GAPAdminRole
AdminRoleAssignment GAPOrgAdminRole
Customer GAPCustomer
domain GAPDomain
DomainAlias GAPDomainAlias
Group GAPGroup
OrgUnit GAPOrgUnit
ProductAndSku GAPPaSku
User GAPUser
UserAddress GAPUserAddress
UserEmail GAPUserEmail
UserExternalId GAPUserExternalId

UserIm

GAPUserIM

UserOrganization

GAPUserOrganization

UserPhone

GAPUserPhone

UserRelation

GAPUserRelation

UserWebsite

GAPUserWebSite

Appendix: Editing System Objects

The following table describes permitted editing methods for G Suite schema types.

Table 28: Methods Available for Editing SchemaClosed Types

Schema typeClosed

Read

Paste

Delete

Refresh

G Suite customer (Customer)

Yes

No

No

Yes

Domain (Domain)

Yes

No

No

No

Domain alias (DomainAlias)

Yes

No

No

No

Organization (OrgUnit)

Yes

Yes

Yes

Yes

User account (User)

Yes

Yes

Yes

Yes

Group (Group)

Yes

Yes

Yes

Yes

Product and SKU (ProductAndSku)

Yes

No

No

Yes

User account: address(UserAddress)

Yes

Yes

Yes

Yes

User account: Email address (UserEmail)

Yes

Yes

Yes

Yes

User account: external ID (UserExternalId)

Yes

Yes

Yes

Yes

User account: instant messenger (UserIm)

Yes

Yes

Yes

Yes

User account: user details (UserOrganization)

Yes

Yes

Yes

Yes

User account: phone number (UserPhone)

Yes

Yes

Yes

Yes

User account: relation (UserRelation)

Yes

Yes

Yes

Yes

User account: website (UserWebsite)

Yes

Yes

Yes

Yes

Admin role (AdminRole)

Yes

Yes

Yes

Yes

Admin privilege (AdminPrivilege)

Yes

No

No

No

Admin roles assignments (AdminRoleAssignment)

Yes

Yes

Yes

Yes

Related Documents