Identity Manager 9.1 - Administration Guide for Connecting to Azure Active Directory

Preprocessor relevant configuration parameter for controlling database model components for Azure Active Directory target system administration. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

Allows configuration of user account data.

Specifies whether a random password is generated when a new user account is added. The password must contain at least those character sets that are defined in the password policy.

Employee to receive an email with the random generated password (manager cost center/department/location/role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the TargetSystem | AzureAD | DefaultAddress configuration parameter.

Mail template name that is sent to supply users with the login credentials for the user account. The Employee - new user account created mail template is used.

Mail template name that is sent to supply users with the initial password. The Employee - initial password for new user account mail template is used.

Mail template used to send notifications about whether default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used.

Postfix for formatting the login name of privileged user accounts.

Prefix for formatting a login name of privileged user accounts.

Default email address of the recipient for notifications about actions in the target system.

Directory where the delta token files for the delta synchronization are stored.

Maximum runtime of a synchronization in minutes. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated.

Mode for automatic employee assignment for user accounts added to the database outside synchronization.

Specifies whether employees are automatically assigned to disabled user accounts. User accounts are not given an account definition.

Mode for automatic employee assignment for user accounts that are added to or updated in the database by synchronization.

Listing of all user account without automatic employee assignment. Names are listed in a pipe (|) delimited list that is handled as a regular search pattern.

Example:

ADMINISTRATOR|GUEST|KRBTGT|TSINTERNETUSER|IUSR_.*|IWAM_.*|SUPPORT_.*|.* | $

Specifies whether employees are updated if their user accounts are changed. This configuration parameter is set to allow ongoing update of employee objects from associated user accounts.

Preprocessor relevant configuration parameter for automatically adding Azure Active Directory groups to the IT Shop. If the parameter is set, all groups are automatically assigned as products to the IT Shop. Changes to this parameter require the database to be recompiled.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

List of all Azure Active Directory groups that must not be automatically assigned to the IT Shop. Each entry is part of a regular search pattern and supports regular expression notation.

Example:

.*Administrator.*|Exchange.*|.*Admins|.*Operators|IIS_IUSRS

Preprocessor relevant configuration parameter for automatically adding Azure Active Directory subscriptions to the IT Shop. If the parameter is set, all subscriptions are automatically assigned as products to the IT Shop. Changes to this parameter require the database to be recompiled.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

List of all Azure Active Directory subscriptions that must not be automatically assigned to the IT Shop. Each entry is part of a regular search pattern and supports regular expression notation.

Preprocessor relevant configuration parameter for automatically adding Azure Active Directory service plans to the IT Shop. If the parameter is set, all service plans are automatically assigned as products to the IT Shop. Changes to this parameter require the database to be recompiled.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

AADDirectoryRole

AADGroup

AADUserHasSubSku

AADGroupHasSubSku

AADOrganization

AADServicePlan

AADSubSku

AADUser

AADVerifiedDomain

AADApplication

AADAppRole

AADAppRoleAssignment

AADServicePrincipal

AADActivityBasedTimeoutPolicy

AADHomeRealmDiscoveryPolicy

AADTokenIssuancePolicy