SynchronizationThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. projects created for a test database, for example, can be transported to a live database. To be able to use synchronization configuration here, modify the One Identity Manager database connection parameter and the start up configuration.
To export a synchronization project from one One Identity Manager database to another
||TIP: To display objects that belong to change labels, click Show.|
Use the wizard to do this, if it is available.
The wizard creates a variable set with the given connection parameters. It adds the synchronization base object, for example, the actual Active Directory domain you want to synchronize, as object in the One Identity Manager database.
Select the category Configuration | One Identity Manager connection | General and click Edit connection....
Run a consistency check.
Activate the synchronization project.
For more detailed information about committing with change labels as well as creating and importing transport packages, see the One Identity Manager Configuration Guide.
In order to provision object modifications in the target system, you must specify which synchronization workflow provisioning should take over. This information is stored in the table DPRObjectOperation. If you create your own provisioning processes, define operations for each of the provisioning tasks. Assign the operations to the synchronization workflows, which are going to be executed. Edit the assignments in the Designer.
To define operations for provisioning processes
|Name||Name of the operation.|
|Synchronization workflowsee WorkflowCollection of all the synchronization steps to be executed.||Workflow for executing provisioning.|
|System connection||Target system connection for the target system in which changes must be provisioned.|
|Table||Table responsible for triggering provisioning.|
|Display name||Operation display name in the One Identity Manager tools' user interface.|
|Description||Spare text box for additional explanation.|
|Processing status||Only used internally by One Identity Manager.|
You can create synchronization projects automatically. This can be particularly useful if you want to set up synchronization projects for different Active Directory domains, which require the same configuration. A new synchronization project is generated from the command line. using the configuration of a reference project. The reference project's configuration is supplied in a configuration file. which you can modify. You can define variable settings, like the target system to connect or password, in parameters, which are used passed values when the command is called.
To set up automation
The file is saved as a Synchronization EditorOne Identity Manager tool for configuring target system synchronization. workspace file with the extension sews.
All data in the configuration file that the project wizard collected when the synchronization project was created, is saved in XML format. The file is divided into three main sections:
<?xml version="1.0" encoding="utf-8" ?>
Customize the settings to create a new synchronization project based on this configuration file. Use parameters for all variable values if different synchronization projects are going to be created with this configuration file.
To Customize the configuration file
SynchronizationThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. projects should be created for various Active Directory domains in different One Identity Manager databases on one and the same database server. A synchronization project has been created with the project wizard for one of these domains. This reference project's configuration file must be adjusted such that it can be used for all the other domains.
The following settings must be customized:
IMPORTANT: The One Identity Manager database connection data in the global definitions (WorkDatabase.ConnectionString) and in the editor definitions (MainConnection.ConnectionParameter) must be identical. If you replace these value with parameters, use the same parameter in each case.
The following table shows the modifications required in the configuration file based on a reference project from a SQL Server database. For more detailed information about connecting to an SQL Server or Oracle database, see the One Identity Manager Installation Guide. For more detailed information about initial data for the authentication module, see the One Identity Manager Configuration Guide.
data source=<database server>;
Replace <database> and <user> with parameters, for example $Database$ and $DBUser$.
Replace <system user> and <password> with parameters, for example $SystemUser$ and $SystemPassword$.
data source=<database server>;
Replace <database>, <DBPassword> and <user> with parameters from the element WorkDatabase.ConnectionString.
ADEnableras=<Remote Access Service>;
ADEnablerecyclebin=<Active Directory recycle bin>;
ADRootdn="<distinguished domain name>";
baseloginaccount=<Active Directory Benutzer>;
basepassword="<Active Directory Kennwort>"
Replace <distinguished domain name>, <domain controller>, <Active Directory user> and <Active Directory password> with parameters.
<synchronization project display name>
Replace <synchronization project display name> with a parameter, if more than one synchronization projects are going to be added to one database.