立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Target System Synchronization Reference Guide

Target system synchronization with the Synchronization Editor Working with the Synchronization Editor Basics of target system synchronization Setting up synchronization
Starting the Synchronization Editor Creating a synchronization project Configuring synchronization
Setting up mappings Setting up synchronization workflows Connecting systems Configuring the synchronization log Editing the scope Using variables and variable sets Setting up start up configurations Setting up base objects
Overview of schema classes Customizing the synchronization configuration Checking the consistency of the synchronization configuration Activating the synchronization project Defining start up sequences Copying synchronization projects
Running synchronization Synchronization analysis Setting up synchronization with default connectors Updating existing synchronization projects Script library for synchronization projects Additional information for experts Troubleshooting errors when connecting target systems Configuration parameters for target system synchronization Configuration file examples

Help for analyzing synchronization issues

You can generate a report for analyzing problems that arise during synchronizationClosed, inadequate performance for example. The report contains information such as:

  • Consistency check results

  • Revision filterClosed settings

  • ScopeClosed applied

  • Analysis of the data store

  • Object access times in the One IdentityClosed Manager database and in the target system

To generate a synchronization analysis report

  1. Select the Help > Generate synchronization analysis report menu item and click Yes in the security prompt.

    The report may take a few minutes to generate. It is displayed in a separate window.

  2. Print the report or save it in one of the available output formats.

Setting up synchronization with default connectors

One IdentityClosed Manager provides connectors for synchronizingClosed with the following target systems:

  • Directly supported target systems

    Separate modules are provided for mapping and processing target system objects. Each target system has its own connector. This includes target systems such as:

    • Active Directory
    • SharePoint
    • SAP R/3

    Connectors for directly supported target systems are described in the administration guides for the relevant modules.

  • Cloud applications

    Using the SCIM connector, Cloud applications can be connected to the Universal Cloud Interface ModuleClosed of the One Identity Manager. Cloud objects are transferred to the Universal Cloud Interface over the Cloud Systems Management Module and can be linked there to identities.

    For more information, see the following guides:

    • One Identity Manager Administration Guide for Connecting to Cloud Applications
    • One Identity Manager Administration Guide for Connecting to the Universal Cloud Interface
  • CSV files

    The CSV connectorClosed can transfer data between CSV files and the One Identity Manager database. In this context, the CSV files map the target system.

    For more information, see the One Identity Manager CSV Connector User Guide.

  • One Identity Manager databases

    Use the One Identity Manager connector to synchronize One Identity Manager databases with the same product version.

    For more information, see the One Identity Manager User Guide for the One Identity Manager Connector.

  • Target systems that are not directly supported

    You can use the Windows PowerShell connector to connect target systems to One Identity Manager that are not directly supported in One Identity Manager. Windows PowerShell cmdlets are used to run read and write operations in the target system.

    For more detailed information, see the One Identity Manager Windows PowerShell Connector User Guide.

  • Other database systems

    With this generic database connectorClosed, you can synchronize external databases with the One Identity Manager database.

    For more information, see the following guides:

    • One Identity Manager Generic Database Connector User Guide for Connecting DB2 (LUW) Databases
    • One Identity Manager Generic Database Connector User Guide for Connecting MySQL Databases
    • One Identity Manager Generic Database Connector User Guide for Connecting Oracle Databases
    • One Identity Manager Generic Database Connector User Guide for Connecting SQLite Databases
    • One Identity Manager Generic Database Connector User Guide for Connecting SQL Server Databases
    • One Identity Manager Generic Database Connector User Guide for the CData ADO.NET Provider
    • One Identity Manager Generic Database Connector User Guide for the generic ADO.NET Provider
    • One Identity Manager Generic Database Connector User Guide for Connecting SAP HANA Databases
    • One Identity Manager Generic Database Connector User Guide for Connecting PostgreSQL Databases

Updating existing synchronization projects

Any required changes to system connectors or the synchronizationClosed engine are made available when you update One IdentityClosed Manager. These changes must be applied to existing synchronization projectsClosed to prevent target system synchronizationsClosed that are already set up, from failing. There are two way to do this:

  • Apply any patches required to the existing synchronization projects.

    Hotfix packages and migration packages are used to install patches for new or changed features and solved issues in One Identity Manager. You must apply these patches manually for the changes to take effect in existing synchronization projects. The default configuration of these synchronization projects is update in the process. CustomClosed modifications are not effected by the patches.

    This way is recommended if the synchronization projects correspond to the default configuration and contain no or only minor customizations.

    Checks are made during daily maintenanceClosed to find out if there are patches available for the existing synchronization projects. This information is displayed on the Synchronization EditorClosed's start page. If there are patches, the icon and the number of patches are displayed next to the synchronization project's name. This display is updated each time a synchronization project is saved.

  • Delete existing synchronization projects and create them again.

    This method is recommended if your synchronization projects contain extensive customizations that might conflict with the modifications in the patches.

For more information about setting up synchronization projects, see the administration guides for connecting target systems.

Detailed information about this topic

Patch view, patch types and dependencies

One IdentityClosed Manager has three patch types. All patches that are applied are displayed in the synchronization projectClosed's migration details. Once a milestone has been applied, the associated patches are not listed separately in the migration details anymore.

Table 72: Patch types
Patch type Description
Enhancement Patch for new or changed functionality.
Fix Patch for solved issues.
Mile stone Milestones are provided with every new One Identity Manager version. A milestone is provided for each context, which includes all the solved issues and enhancements of the previous version.

Patches can be dependent on each other. These dependencies determine the order in which the patches are applied. When a patch is applied, the patches that are dependent on it are also applied. If a new version of One Identity Manager is installed, all patches for the version are consolidated into one milestone. If patches are available for different version of the program, the older patches must always be applied first. Therefore, One Identity Manager automatically applies all previous milestone once a patch for a later version is selected.

Patches and their dependencies are displayed in the patch view. The left side shows the patches that are available. The newest patches are at the top. Dependent patches are displayed below. In this area, select the patches that you want to apply to the current synchronization project. Then the patches are displayed on the right-hand side, with all their predecessor in the order in which they will be applied.

Each patch contains a script which checks if the patch can be applied to the synchronization project. Whether or not a patch can be applied depends on the concrete synchronization configuration.

Table 73: Meaning of icons in the rule tool bar
Icon Meaning

Solved issues

Shows patches for solved issues.

Enhancements

Shows all patches for new or changed features.

Shows all patches that are cannot be applied to the synchronization project.

Shows all patches that are already applied to the synchronization project.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级