立即与支持人员聊天
与支持团队交流

Starling Connect Hosted - One Identity Manager Administration Guide

About this guide One Identity Starling Connect overview One Identity Starling Supported cloud applications Working with connectors Connector versions Salesforce Facebook Workplace SAP Cloud Platform JIRA Server RSA Archer SuccessFactors AWS IAM ServiceNow Dropbox Crowd Atlassian JIRA Confluence Trello Box Pipedrive SuccessFactors HR NutShell Insightly Egnyte SugarCRM Oracle IDCS Statuspage Zendesk Sell Workbooks DocuSign Citrix ShareFile Zendesk Azure AD Google Workspace Concur Tableau GoToMeeting Coupa AWS Cognito Okta DataDog Hideez Opsgenie Informatica Cloud Services AppDynamics Marketo Workday HR OneLogin PingOne Aha! SAP Litmos HackerRank Slack ActiveCampaign Webex Apigee Databricks Hive PagerDuty Dayforce Smartsheet Pingboard SAP Cloud for Customer Azure Infrastructure Oracle Fusion Cloud Majesco LuccaHR OpenText JFrog Artifactory xMatters Discourse Testrail ChipSoft PingOne Platform Azure DevOps UKG PRO Atlassian Cloud Appendix: Creating a service account in Google Workspace Appendix: Setting a trial account on Salesforce Registering the application, providing necessary permissions, retrieving Client Id and Client Secret from the Azure AD tenant Generating a private key for service account in GoToMeeting Configuring AWS IAM connector to support entitlements for User and Group Configuring Box connector to support additional email IDs for users One Identity Manager E2E integration needs for Hideez connector Configuring custom attributes for ServiceNow v.1.0 Configuring custom attributes for Coupa v.1.0 Configuring custom attributes in connectors Disabling attributes Configuring a connector that uses the consent feature Synchronization and integration of Roles object type with One Identity Manager Synchronization and integration of Workspaces object type with One Identity Manager Synchronization and integration of Products object type with One Identity Manager User centric membership Creating multi-valued custom fields in One Identity Manager Synchronization and assignment of PermissionSets to Users with One Identity Manager Connectors that support password attribute in User object Connectors that do not support special characters in the object ID Creating an app for using SCIM on Slack Enterprise Grid Organization Creating a Webex integration application, providing necessary scopes, retrieving Client Id and Client Secret Retrieving the API key from Facebook Workplace Outbound IP addresses Values for customer-specific configuration parameters in Workday HR connector Initiate an OAuth connection to SuccessFactors Creating custom editable/upsertable attributes in Successfactors employee central Custom Foundation Objects in Successfactors HR connector Configuring additional datetime offset in connectors How to Create custom attribute for Users in SuccessFactors portal SAP Cloud for Customer - Steps to add custom fields at One Identity Manager attributes Creating a Service Principal for the Azure Infrastructure Connector Workday permissions needed to integrate via the Starling Connector Configuring integration application in DocuSign Creating integration Connect Client in Coupa Retrieving Azure DevOps Personal Access Token (PAT) Setup integration system and field override service in Workday Retrieving Atlassian Cloud API Key and Directory ID Retrieving Tableau Personal Access Token (PAT)

Synchronization and integration of Workspaces object type with One Identity Manager

This section describes the synchronization and integration of Workspaces object type with One Identity Manager.

To synchronize and integrate Workspaces object type with One Identity Manager:

  1. Ensure that the Workspaces endpoint of Starling Connect Connector returns the list of Workspaces from the target instance.

  2. Create a mapping for Workspaces endpoint.

    To create a mapping for Workspaces endpoint:

    1. Open Synchronization Editor.

    2. Select the project.

    3. Navigate to the Navigation pane.

    4. In the Navigation pane, click Configuration.

    5. In the Navigation pane, click Target system.

    6. Click Update Schema in the General section.

    7. In the Navigation pane, click Mappings.

    8. Create a new mapping named Workspaces .

      To create a new mapping, click + in the Mappings section.

    9. In the Create map window, enter the values for all the fields, including the display name, in the following sections :

      • General
      • Relation

  3. Click OK.

  4. Click Next.

  5. In the Mapping Wizard window, in the Select task section, select the required template. For example, Group template.

  6. Create a new Fixed-value virtual attribute at the target system side with the name vrtWorkspaces, for example.

    To create a Fixed-value virtual attribute:

    1. Click + at the target system side in the SCIM section.
    2. In the Create property window, enter the values for all the fields.
      The value of the Value field must be Profiles.

  7. Configure Mappings.
    To configure Mappings:

    1. Map Item type <- vrtWorkspaces.

    2. Map Ident_UCIItem <- name.

  8. Create Synchronization workflow for Workspaces .

    NOTE: The procedure to Create Synchronization workflow for Workspaces is similar to the procedure to Create Synchronization workflow for Users and to Create Synchronization workflow for Groups.

  9. Create Provisioning workflows for Workspaces .

    NOTE: The procedure to Create Provisioning workflow for Workspaces is similar to the procedure to Create Provisioning workflow for Users and to Create Provisioning workflow for Groups.

  10. Run Synchronization.

  11. Perform assign or unassign of Workspaces at Users and Groups.

Synchronization and integration of Products object type with One Identity Manager

This section describes the synchronization and integration of Products object type with One Identity Manager.

To synchronize and integrate Products object type with One Identity Manager:

  1. Ensure that the Products endpoint of Starling Connect Connector returns the list of Products from the target instance.

  2. Create a mapping for Products endpoint.

    To create a mapping for Products endpoint:

    1. Open Synchronization Editor.

    2. Select the project.

    3. Navigate to the Navigation pane.

    4. In the Navigation pane, click Configuration.

    5. In the Navigation pane, click Target system.

    6. Click Update Schema in the General section.

    7. In the Navigation pane, click Mappings.

    8. Create a new mapping named Products .

      To create a new mapping, click + in the Mappings section.

    9. In the Create map window, enter the values for all the fields, including the display name, in the following sections :

      • General
      • Relation

  3. Click OK.

  4. Click Next.

  5. In the Mapping Wizard window, in the Select task section, select the required template. For example, Group template.

  6. Create a new Fixed-value virtual attribute at the target system side with the name vrtProducts, for example.

    To create a Fixed-value virtual attribute:

    1. Click + at the target system side in the SCIM section.
    2. In the Create property window, enter the values for all the fields.
      The value of the Value field must be Profiles.

  7. Configure Mappings.
    To configure Mappings:

    1. Map Item type <- vrtProducts.

    2. Map Ident_UCIItem <- name.

  8. Create Synchronization workflow for Products .

    NOTE: The procedure to Create Synchronization workflow for Products is similar to the procedure to Create Synchronization workflow for Users.

  9. Create Provisioning workflows for Products .

    NOTE: The procedure to Create Provisioning workflow for Products is similar to the procedure to Create Provisioning workflow for Users .

  10. Run Synchronization.

  11. Perform assign or unassign of Products at Users.

User centric membership

This section describes the procedure to configure One Identity Manager to achieve User centric membership operation. The following tools are used to configure the configure One Identity Manager to achieve User centric membership: Synchronization Editor, Schema Extension, and Designer.

To to configure One Identity Manager to achieve User centric membership

  1. Using Synchronization Editor.
    1. Creating a new schema class using Synchronization Editor
    2. Configuring User centric membership for Groups, UserGroups and AccountGroups using Synchronization Editor.
  2. Using Schema Extension.
  3. Using Designer.

Creating a new schema class using Synchronization Editor

This section describes the procedure to create a new schema class. Synchronization Editor is used to create a new schema class.

This is an example of how to create a new schema class. In this example, a schema class named UCIGroup(Group) is created for the Group resource type.

To create a new schema class

  1. Launch the Synchronization Editor.
  2. Select Configurations | One Identity Manager connection | Schema classes.
  3. Click + to create a new schema class.
  4. In the New schema class window, select UCIGroup from Schema type list and enter the values of the other fields as shown in the table below
    Table 448: New schema class UCIGroup(Group)Group for Group
    Field Value
    Schema Type UCIGroup
    Display Name UCIGroup(Group)
    Class Name UCIGroup_Group
    Description UCIGroup_Group
    System Objects --> Condition ResourceType = Group

    NOTE: A similar table is available in the corresponding sections to create the other schema classes.

  5. Click Ok.

NOTE: Similarly, you can create the other schema classes by referring to the values in the corresponding tables in the corresponding sections.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级