Chat now with support
Chat with Support

Identity Manager 9.2 - One Identity Manager Connector User Guide

Setting up synchronization with the One Identity Manager connector Setting up system synchronization Setting up synchronization using custom configuration Troubleshooting

Troubleshooting

For more information about correcting errors during synchronization of object hierarchies, see the One Identity Manager Target System Synchronization Reference Guide.

Preventing recalculation of dynamic roles

If dynamic roles are synchronized, the assignments should not be recalculated on the work database as it is possible that not all the required data is available here yet. The memberships and assignments are calculated only on the central database and transferred to the working database by synchronization.

To prevent assignments to synchronized dynamic roles being calculated

  1. In the Designer, select the One Identity Manager Schema > Tables > Table category.

  2. Select the DynamicGroup table and click the Show table definition task to start the Schema Editor.

  3. In the Table properties view, select the Table scripts tab.

  4. In the Script (OnSaving) field, enter the following script.

    If CBool(Connection.Variables("Transport")) AndAlso CBool(Connection.Variables("Projector")) Then
         Base.PutValue("IsRecalculationDeactivated", 1)
    End If
  5. Select the Database > Commit to database and click Save.

This prevents recalculation of assignments for dynamic roles that are imported into the work database by synchronization. The role memberships in effect are those from the central database that synchronized with the work database.

IMPORTANT: You cannot specify a mapping direction for the DynamicGroup.IsRecalculationDeactivated column (No recalculation of assignments) in the synchronization configuration.

Ignoring data error in synchronization

By default, objects with incorrect data are not synchronized. These objects can be synchronized once the data has been corrected. In certain situations, however, it might be necessary to synchronize objects like these and ignore the data properties that have errors. This synchronization behavior can be configured in One Identity Manager.

The setting does not take effect if the application server's REST API is used to connect to the central database.

To ignoring data errors during synchronization in One Identity Manager

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > One Identity Manager connection category.

  3. In the General view, click Edit connection.

    This starts the system connection wizard.

  4. On the Additional options page, enable Try to ignore data errors.

    This option is only effective if Continue on error is set in the synchronization workflow.

    Default columns, such as primary keys, UID columns, or mandatory input columns cannot be ignored.

  5. Save the changes.

IMPORTANT: If this option is set, One Identity Manager tries to ignore commit errors that could be related to data errors in a single column. This causes the data changed in the affected column to be discarded and the object is subsequently saved again. This effects performance and leads to loss of data.

Only set this option in the exceptional circumstance of not being able to correct the data before synchronization.

Help for analyzing synchronization issues

You can generate a report for analyzing problems that arise during synchronization, inadequate performance for example. The report contains information such as:

  • Consistency check results

  • Revision filter settings

  • Scope applied

  • Analysis of the data store

  • Object access times in the One Identity Manager database and in the target system

To generate a synchronization analysis report

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Help > Generate synchronization analysis report menu item and click Yes in the security prompt.

    The report may take a few minutes to generate. It is displayed in a separate window.

  3. Print the report or save it in one of the available output formats.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating