Chat now with support
Chat with Support

Identity Manager 8.0 - Target System Synchronization Reference Guide

Target Synchronization with the Synchronization Editor Basics of Target System Synchronization Setting up Synchronization
Starting the Synchronization Editor Creating a Synchronization Project How to Configure Synchronization
Setting Up Mappings Setting up Synchronization Workflows Connecting Systems Editing the Scope Using Variables and Variable Sets Setting up Start up Configurations Setting up Base Objects
Overview of schema Classes Customizing Synchronization Configuration Checking Synchronization Configuration Consistency Activating the Synchronization Project
Running Synchronization Synchronization Analysis Setting up Synchronization with Default Connectors Updating Existing Synchronization Projects Additional Information for Experts Error Handling Appendix: Example of a Configuration File

Specifying the Script Language in Synchronization Projects

Specifying the Script Language in Synchronization Projects

Scripts can be implemented at different points in the synchronization configuration. You can use scripts, for example, to define a scope, add schema classes or virtual schema properties of type "script property".

When you define a synchronization project with the project wizard, you specify a script language in which to create the script. You can select either "C#" or "Visual Basic .NET". You can only use project templates in the synchronization wizard that support the selected script language.

NOTE: If you want to create a synchronization project using a template, check whether the project template supports the selected script language.

Note: You cannot change the script language once the project wizard is finished!

Create a new synchronization project to change the script language later.

NOTE: If you are running One Identity Manager in a Linux system, you can only use C# as the script language.
Related Topics

Templates for Creating Synchronization Projects

Templates for Creating Synchronization Projects

Some system connectors provide template which you can use to configure a complete synchronization project with the project wizard, The project templates add the following components to the synchronization configuration in the synchronization project, depending on the target system type.

  • The scope
  • A start up configuration (without schedule)
  • The default variable set
  • A base object

    The synchronization base object, for example, the actual Active Directory domain you want to synchronize, is added as an object in the One Identity Manager database.

  • A synchronization workflow for the initial loading of the target system into the One Identity Manager database

    The workflow display the following characteristics:

    • SynchronizationClosed is the direction "One Identity Manager".
    • Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
  • A provisioning workflow

    This workflow is only added if the option Changes still have to be made in the target system was selected in the project wizard on page Limit target system access.

    The workflow shows the following characteristics:

    • Synchronization is in direction "target system".
    • Processing methods are only defined in the synchronization steps in synchronization direction "target system".
    • Synchronization steps are only created for such schema classes whose schema types have write access.
  • The schema classes required
  • MappingClosed for all schema classes required

    These include:

    • Required virtual schema properties
    • Property matching rules
    • Object matching rules

Once a synchronization project has been created from a project template, you can check the settings assign a schedule and start synchronization.

Restricting System Access

Restricting System Access

When you set up a synchronization project with the project wizard, you decide whether the target system is only read in or whether One Identity Manager can also make changes. If you select the option Target system has read-only access, only modifications in the target system are transferred to the One Identity Manager database. Changes in the One Identity Manager database are not written to the target system. This means:

  • Direction of synchronizationClosed is "One Identity Manager".
  • The project wizard only creates one synchronization workflow. A provisioning workflow is not added.
  • Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
Related Topics

How to Configure Synchronization

Not all system connectors provide a project template for creating a full configured synchronization project. Therefore, you can also create a synchronization project manually. In this case, the project wizard sets up the system connection. All other synchronization configuration components must be configured after you have saved the synchronization project.

To set up synchronization of the One Identity Manager database with a target system manually

  1. Install and configure a synchronization server and declare the server as Job serverClosed in One Identity Manager.
  2. Create a new synchronization project.
    • The project wizard sets up the system connection.
    • Select Create blank project on the page Select project template.
  1. Add mappings. Define property mapping rules and object matching rules.
  2. Create synchronization workflows.
  3. Create a start up configuration.
  4. Define the synchronization scope.
  5. Specify the base object of the synchronization.
  6. Specify the extent of the synchronization log.
  7. Run a consistency check.
  8. Activate the synchronization project.
  9. Save the new synchronization project in the database.
Detailed information about this topic
Related Documents