Chat now with support
Chat with Support

Identity Manager 8.2.1 - Target System Synchronization Reference Guide

Target system synchronization with the Synchronization Editor Working with the Synchronization Editor Basics of target system synchronization Setting up synchronization
Starting the Synchronization Editor Creating a synchronization project Configuring synchronization
Setting up mappings Setting up synchronization workflows Connecting systems Editing the scope Using variables and variable sets Setting up start up configurations Setting up base objects
Overview of schema classes Customizing the synchronization configuration Checking the consistency of the synchronization configuration Activating the synchronization project Defining start up sequences
Running synchronization Synchronization analysis Setting up synchronization with default connectors Updating existing synchronization projects Script library for synchronization projects Additional information for experts Troubleshooting errors when connecting target systems Configuration parameters for target system synchronization Configuration file examples

Templates for creating synchronization projects

Some system connectors provide templateClosed which you can use to configure a complete synchronization projectClosed with the project wizard, The project templatesClosed add the following components to the synchronization configuration in the synchronization project, depending on the target system type.

  • The scope
  • A start up configuration (without scheduleClosed)
  • The default variable set
  • A base object

    The synchronization base object, e.g. the actual Active Directory domain that you want to synchronize, is added as an object in the One Identity Manager database.

  • A synchronization workflowClosed for the initial import of the target system into the One Identity Manager database

    The workflow has the following characteristics:

    • Direction of synchronization is "One Identity Manager".
    • Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
  • A provisioning workflowClosed

    This workflow is only created if the Read/write access to target system. ProvisioningClosed available. option is selected on the Restrict target system access page of the project wizard.

    The workflow has the following characteristics:

    • Synchronization in the direction of the "Target systemClosed".
    • Processing methods are only defined in the synchronization steps in synchronization direction "Target system".
    • Synchronization steps are only created for such schema classes whose schema types have write access.
  • The schema classes required
  • Mappings for all schema classes required

    These include:

    • Required virtual schema properties
    • Property mapping rules
    • Object matching rules

Also created is:

  • Operations for provisioning and single object synchronization

Once a synchronization project has been created from a project template, you can check the settings assign a schedule and start synchronization.

Restricting system access

When you set up a synchronization projectClosed with the project wizard, you decide whether the target system is only read in or whether One Identity Manager can also make changes. If you select the Target systemClosed has read-only access option, only modifications in the target system are transferred to the One Identity Manager database. Changes in the One Identity Manager database are not written to the target system. This means:

  • Direction of synchronization is "One Identity Manager".
  • The project wizard only creates one synchronization workflowClosed. A provisioning workflowClosed is not added.
  • Processing methods in the synchronization steps are only defined in synchronization direction "One Identity Manager".
Related topics

Configuring synchronization

Not all system connectors provide a project templateClosed for creating a full configured synchronization projectClosed. Therefore, you can also create a synchronization project manually. In this case, the project wizard sets up the system connection. All other synchronization configuration components must be configured after you have saved the synchronization project.

To manually set up synchronization of the One Identity Manager database with a target system

  1. Install and configure a synchronization serverClosed and declare the server as a Job server in One Identity Manager.
  2. Create a new synchronization project.
    • The project wizard sets up the system connection.
    • On the Select project template page, select Create blank project.
  1. Add mappings. Define property mapping rules and object matching rules.

  2. Create synchronization workflowsClosed.

  3. Create a start up configuration.

  4. Define the synchronization scope.

  5. Specify the base object of the synchronization.

  6. Specify the extent of the synchronization log.

  7. Run a consistency check.

  8. Activate the synchronization project.

  9. Save the new synchronization project in the database.

Detailed information about this topic

Setting up mappings

MappingsClosed group together the rules used to map the schema properties of two connected systemsClosed. For this, a schema class is created for every schema type which requires mapping. A schema class limits the result list of a schema type through defined filer criteria. A mapping maps schema properties from exactly one target system schema class to the schema properties of exactly one schema class in the One Identity Manager schema. A schema class without a filter condition represents the schema type.

Property mapping rules describe how the target system schema properties are mapped in the One Identity Manager schema. Object matching rules assign schema properties through which system objects can be uniquely identified. For example, Active Directory groups can be uniquely identified by the schema properties DistinguishedName and ObjectGUID.

You specify in the mapping, which mapping directionClosed is permitted for the connected schema classes. Furthermore, you can also specify the permitted mapping direction for individual property mapping rules.

Default mappings for target system synchronizationClosed are added if the synchronization projectClosed was created with a default project templateClosed. You can edit or delete these mappings or create new mappings. If the synchronization project was created without a project template, no mappings are set up.

The schema property mapping is edited with the mapping editor.

Detailed information about this topic
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating