For more information about correcting errors during synchronization of object hierarchies, see the One Identity Manager Target System Synchronization Reference Guide.
For more information about correcting errors during synchronization of object hierarchies, see the One Identity Manager Target System Synchronization Reference Guide.
If dynamic roles are synchronized, the assignments should not be recalculated on the work database as it is possible that not all the required data is available here yet. The memberships and assignments are calculated only on the central database and transferred to the working database by synchronization.
To prevent assignments to synchronized dynamic roles being calculated
In the Designer, select the One Identity Manager Schema > Tables > Table category.
Select the DynamicGroup table and click the Show table definition task to start the Schema Editor.
In the Table properties view, select the Table scripts tab.
In the Script (OnSaving) field, enter the following script.
If CBool(Connection.Variables("Transport")) AndAlso CBool(Connection.Variables("Projector")) Then |
Base.PutValue("IsRecalculationDeactivated", 1) |
End If |
Select the Database > Commit to database and click Save.
This prevents recalculation of assignments for dynamic roles that are imported into the work database by synchronization. The role memberships in effect are those from the central database that synchronized with the work database.
IMPORTANT: You cannot specify a mapping direction for the DynamicGroup.IsRecalculationDeactivated column (No recalculation of assignments) in the synchronization configuration.
By default, objects with incorrect data are not synchronized. These objects can be synchronized once the data has been corrected. In certain situations, however, it might be necessary to synchronize objects like these and ignore the data properties that have errors. This synchronization behavior can be configured in One Identity Manager.
The setting does not take effect if the application server's REST API is used to connect to the central database.
To ignoring data errors during synchronization in One Identity Manager
In the Synchronization Editor, open the synchronization project.
Select the Configuration > One Identity Manager connection category.
In the General view, click Edit connection.
This starts the system connection wizard.
On the Additional options page, enable Try to ignore data errors.
This option is only effective if Continue on error is set in the synchronization workflow.
Default columns, such as primary keys, UID columns, or mandatory input columns cannot be ignored.
IMPORTANT: If this option is set, One Identity Manager tries to ignore commit errors that could be related to data errors in a single column. This causes the data changed in the affected column to be discarded and the object is subsequently saved again. This effects performance and leads to loss of data.
Only set this option in the exceptional circumstance of not being able to correct the data before synchronization.
You can generate a report for analyzing problems that arise during synchronization, inadequate performance for example. The report contains information such as:
Consistency check results
Revision filter settings
Scope applied
Analysis of the data store
Object access times in the One Identity Manager database and in the target system
To generate a synchronization analysis report
In the Synchronization Editor, open the synchronization project.
Select the Help > Generate synchronization analysis report menu item and click Yes in the security prompt.
The report may take a few minutes to generate. It is displayed in a separate window.
Print the report or save it in one of the available output formats.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center