When you set up a synchronization projectA collection of all data required for synchronizingThe process of comparing data between One Identity Manager and a target system. Objects and their properties are compared by fixed rules. Synchronization results in the identical data situation in the target system and One Identity Manager database. and provisioning a target system. Connection data, schema classes and properties, mappingsList of object matching rules and property mapping rules which map the schema properties of two connected systems to one another., and synchronization workflows all belongs to this. in an encrypted One Identity Manager database, sensitive data is encrypted. This affects passwords for connection data as well as variables that are labeled as secret. The Synchronization EditorOne Identity Manager tool for configuring target system synchronizationPost processing of objects that were marked as outstanding by synchronization.. requires all connection data in decrypted form in order to access connected systems. You can nevertheless open the synchronization project and edit it partially.
If the Synchronization Editor now accesses the connection system, it cannot establish a system connection because certain connection parameters are encrypted. The values can be decrypted through an appropriately configured remote connection. Set up a remote connection server to do this. For more information, see Establish remote connection. Note here the relevant restrictions for setting up a remote connection server.
To enable the system connection despite encrypted connection data
Edit the system connection.
An extra dialog box is displayed.
Set the first option and click OK.
Enter the remote connection properties.
This sets up the remote connection. The connection remains in place for as long as the synchronization project is open in the Synchronization Editor.
NOTE: If a remote connection is not possible, you have the option, at this point, to enter values for establishing the system connection.
- Set the second option for this and enter the missing values. Click OK.
To decrypt encrypted values by default when you open a synchronization project
- In the Designer, set the "DPR | UI | EncryptedValueHandling" configuration parameter and select the value "ByUser" on the Options tab.
The user can decide whether encrypted values should be ignored or not.
|Value required by the connector to establish a system connection.
|Ignore this value
|Specifies whether to ignore the value. The synchronization project can be selectively edited. However, all actions which required accessing the connected system, cannot be executed.
|Specifies whether the values entered are shown. If this option is not set, input is masked.
|Remember the values and save locally
|Specifies whether the data entered is saved locally. The next time the synchronization project is opened, the stored values are applied and can be confirmed or altered.
IMPORTANT: If an encrypted value has been changed in the One Identity Manager database, the changed value must also be changed on the workstation as soon as the synchronization project is next opened.
Otherwise, the value is overwritten by the locally stored data when the synchronization project is saved. Modifications (of passwords, for example) go missing this way!
To avoid overwriting
To delete locally saved data
Ignores encrypted values and open the synchronization project.