The following system variables must be defined for the attribute mappings. For more detailed information about variables, see the One Identity Manager Target System Synchronization Reference Guide.
Table 1: System variables
|
IdentDomain |
The name of your RACF domain, for example, RACF_DOMAIN |
|
UserLocation |
Parent DN of your RACF user container, for example, profiletype=user,cn=mainframe1,o=mycompany,c=com |
|
GroupLocation |
Parent DN of your RACF group container, for example, profiletype=group,cn=mainframe1,o=mycompany,c=com |
|
DatasetLocation |
Parent DN of your RACF dataset container, for example, profiletype=dataset,cn=mainframe1,o=mycompany,c=com |
Related topics
A domain filter must be created to identify information that has been retrieved from the RACF database to keep it separate from other imported data.
-
Update the One Identity Manager schema so that all entries are included.
-
In the Synchronization Editor, open your RACF project.
-
Select Configuration > One Identity Manager connection.
-
In the General section, click Update schema.
-
Click Yes in the next two dialogs.
-
Click OK when complete.
-
In Manager
-
Select LDAP > Domains.
-
In the result list toolbar, click 
.
-
On the General tab, enter the following general master data.
Table 2: Domain Master Data
|
Display name |
Display name, for example, RACF Domain |
|
Distinguished name |
Distinguished name of the domain, for example, cn=mainframe1,o=mycompany,c=com |
|
Domain |
Domain name, for example, RACF_DOMAIN |
|
Structural object class |
Structural object class representing the object type; enter DCOBJECT |
-
Save the changes.
-
In the Synchronization Editor, open your RACF project.
-
Select Configuration > One Identity Manager connection.
-
Select the Scope view and click Edit scope.
-
Select the object type LDPDomain in the Scope hierarchy list and set the Object filter to Ident_Domain =’$IdentDomain$’.
-
Save the changes.
For more detailed information about scopes, see the One Identity Manager Target System Synchronization Reference Guide.
Related topics
This section describes a possible mapping between a user account in RACF and the standard One Identity Manager database table called LDAPAccount.
For more detailed information about setting up mappings, see the One Identity Manager Target System Synchronization Reference Guide.
Detailed information about this topic
When creating a user in the RACF database, the following LDAP attributes must be defined:
Related topics
