4 Extending the Functionality of the Connector

This chapter describes procedures that you can perform to modify the connector for addressing your specific business requirements.

This chapter discusses the following optional procedures:

Note:

These procedures are aimed at extending the functionality of the connector:

• The "Modifying Existing Field Mappings" section described the procedure to modify the mappings between fields of the target system and Oracle Identity Manager.

• The "Adding New Fields for Target Resource Reconciliation" section describes the procedure to add mappings between fields of the target system and Oracle Identity Manager

• The "Adding New Fields for Provisioning" section describes the procedure to add mappings between fields of the target system and Oracle Identity Manager.

• The "Configuring the Connector for Multiple Installations of the Target System" section describes the procedure to configure the connector for multiple installations of the target system.

4.1 Modifying Existing Field Mappings

Default mappings between fields of the target system and Oracle Identity Manager are listed in the following sections:

• "Mailbox Fields for Target Resource Reconciliation"

• "Mailbox Fields for Provisioning"

If you want to modify these mappings, then:

1. Log in to the Design Console.

2. Expand Administration, and double-click Lookup Definition.

3. Search for and open the lookup definition that you want to modify.

   Table 4-1 describes the contents of the lookup definition that contains field mapping information for reconciliation and provisioning.

   Table 4-1 Lookup Definitions That Store Field Mapping Information

   Lookup Definition	Contents of the Code Key Column	Contents of the Decode Column
   Lookup.Exchange.Configuration This is used during reconciliation and provisioning.	Names of fields on Microsoft Active Directory	Names of process form fields for Microsoft Active Directory
   AtMap.Exchange This is used during provisioning.	Names of Microsoft Exchange fields on Microsoft Active Directory	Names of process form fields for Microsoft Exchange

   
   

4. Make the required change in the field mappings by modifying the Code Key and Decode values.

   For example, you can change the Code Key value for distinguishedName to sAMAccountName.

5. Click the save icon.

4.2 Adding New Fields for Target Resource Reconciliation

Note:

This section describes an optional procedure. Perform this procedure only if you want to add new fields for target resource reconciliation.

By default, the fields listed in Table 1-3, "Mailbox Fields for Target Resource Reconciliation" are mapped for reconciliation between the target system and Oracle Identity Manager. If required, you can add new fields for target resource reconciliation.

Before you add a new field for target resource reconciliation, you must first determine the target system name of the field as follows:

1. Install the Microsoft Active Directory schema, if it is not already installed.

   Refer to the Microsoft Web site for information about installing the schema.

2. Open the Microsoft Active Directory schema.

3. Expand the Console Root folder, expand the schema, and then click Attributes.

4. Search for the field that you want to add, and then note down its name.

   For example, if you want to add the Telephone Number field for reconciliation, then note down telephoneNumber. Figure 4-1 shows the Telephone Number field added in the telephoneNumber Properties dialog box.

   Figure 4-1 New Field Added for Reconciliation

   
   Description of "Figure 4-1 New Field Added for Reconciliation"
   
   

To add a new field for target resource reconciliation:

See Also:

Oracle Identity Manager Design Console Guide for detailed information about these steps

1. Log in to the Oracle Identity Manager Design Console.

2. Create a new version of the process form as follows:

   1. Expand Development Tools.

   2. Double-click Form Designer.

   3. Search for and open the UD_MSEXCHG process form.

   4. Click Create New Version. On the Create a new version dialog box, enter a new version in the Label field, and then click the Save icon. Figure 4-2 shows the new version of the form created in the process form.

      Figure 4-2 New Version of Process Form

      
      Description of "Figure 4-2 New Version of Process Form"
      
      

3. Add the new field on the process form as follows:

   1. Click Add. A field is added to the list. Enter the details of the field.

      For example, if you are adding the Telephone Number field, enter UD_MSEXCHG_TELEPHONE_NUMBER in the Name field and then enter the rest of the details of this field.

   2. Click Save.

   3. To activate the newly created form, click Make Version Active. Figure 4-3 shows details of the new field added in the process form.

      Figure 4-3 New Field Added to the Process Form

      
      Description of "Figure 4-3 New Field Added to the Process Form"
      
      

4. Add the new field to the list of reconciliation fields in the resource object as follows:

   1. Expand Resource Management.

   2. Double-click Resource Objects.

   3. Search for and open the Exchange User resource object.

   4. On the Object Reconciliation tab, click Add Field.

   5. In the Add Reconciliation Field dialog box, enter the details of this field.

      For example, enter Telephone Number in the Field Name field and select String from the Field Type list.

      Later in this procedure, you will enter the field name as the Decode value of the entry that you create in the lookup definition for reconciliation.

   6. Click Save. Figure 4-4 shows the new reconciliation field added to the resource object in the process form.

      Figure 4-4 New Field Added to the Resource Object

      
      Description of "Figure 4-4 New Field Added to the Resource Object"
      
      

5. Create a reconciliation field mapping for the new field on the process form as follows:

   1. Expand Process Management.

   2. Double-click Process Definition.

   3. From the Process Definition table, select and open the Exchange User resource object.

   4. Click Reconciliation Field Mappings and then click Add Field Map.

   5. In the Field Name field, select the value for the field that you want to add.

      For example, select Telephone Number.

   6. In the Field Type field, select the type of the field that is prepopulated.

   7. Double-click the Process Data Field field. A list of process data columns is displayed. From the list, select the process data column corresponding to the process data field.

      For example, select Telephone Number = UD_EXCHANGEUSER_TELEPHONE_NUMBER.

   8. Click the Save icon. Figure 4-5 shows the mapping of new reconciliation field to the Process Data Field in the process form.

      Figure 4-5 Reconciliation Field Mappings

      
      Description of "Figure 4-5 Reconciliation Field Mappings"
      
      

6. Create an entry for the field in the lookup definition for reconciliation as follows:

   1. Expand Administration.

   2. Double-click Lookup Definition.

   3. Search for and open the AtMap.Exchange lookup definition.

   4. Click Add and enter the Code Key and Decode values for the field. The Code Key value must be the name of the field on the target system, which you determined at the start of this procedure.

      For example, enter telephoneNumber in the Code Key field and then enter Telephone Number in the Decode field.

   5. Click Save. Figure 4-6 shows the code key and the decode value added to the lookup definition in the process form.

      Figure 4-6 AtMap.Exchange Lookup Definition

      
      Description of "Figure 4-6 AtMap.Exchange Lookup Definition"
      
      

4.3 Adding New Fields for Provisioning

Note:

This section describes an optional procedure. Perform this procedure only if you want to add new fields for provisioning

By default, the fields listed in Table 1-6, "Mailbox Fields Used in Provisioning" are mapped for provisioning between Oracle Identity Manager and the target system. If required, you can map additional fields for provisioning.

Before you add a new field for provisioning, you must first determine the name of the field from the Microsoft Active Directory schema as follows:

1. Log in to Microsoft Active Directory.

2. Open the Microsoft Active Directory schema.

3. Expand the Console Root folder, expand the schema, and then click Attributes.

4. Search for the field that you want to add, and then note down its name.

   For example, if you want to add the Telephone Number field for reconciliation, then note down telephoneNumber. Figure 4-7 shows the Telephone Number added in the telphoneNumber Properties dialog box.

   Figure 4-7 New Field Added for Provisioning

   
   Description of "Figure 4-7 New Field Added for Provisioning"
   
   

To add a new field for provisioning:

See Also:

Oracle Identity Manager Design Console Guide for detailed information about these steps

1. Log into Oracle Identity Manager Design Console.

2. Create a new version of the process form:

   1. Expand Development Tools.

   2. Double-click Form Designer.

   3. Search for and open the UD_MSEXCHG process form.

   4. Click Create New Version. On the Create a new version dialog box, enter a new version in the Label field, and then click the Save icon. Figure 4-8 shows the new version form created in the process form.

      Figure 4-8 New Version Created in the Process Form

      
      Description of "Figure 4-8 New Version Created in the Process Form"
      
      

3. Add the new field on the process form.

   If you have added the field on the process form by performing Step 3 of "Adding New Fields for Target Resource Reconciliation", then you need not add the field again. If you have not added the field, then:

   1. Click Add. A field is added to the list. Enter the details of the field.

      For example, if you are adding the Telephone Number field, enter UD_MSEXCHG_TELEPHONE_NUMBER in the Name field and then enter the rest of the details of this field.

   2. Click Save and then click Make Version Active. Figure 4-9 shows the new field added in the process form.

      Figure 4-9 New Field Added in the Process Form

      
      Description of "Figure 4-9 New Field Added in the Process Form"
      
      

4. Create a new variable in the Adapter Factory section:

   1. Expand Development Tools.

   2. Click Adapter Factory and query to get all adapters. The adapter factory table is displayed.

   3. Double-click MEXC Set User Properties.

      Navigate to the Variable List tab, click Add, and create a new variable corresponding to the value that you want to provision.

      Click Save. Figure 4-10 shows the new variable added in the process form.

      Figure 4-10 New Variable Added in the Process Form

      
      Description of "Figure 4-10 New Variable Added in the Process Form"
      
      

5. Add string array to the vector:

   1. In the Adapters Task tab, double-click Set User Properties.

   2. Expand the method and right-click Input: Vector.

   3. Select Add String Type and then select Add String Array. A new string array item is added at the end of the vector.

   4. Right-click Input: String[ ], select Add String and then add two strings.

   5. Click Save. Figure 4-11 shows the string array added to the vector in the process form.

      Figure 4-11 String Array Added to the Vector

      
      Description of "Figure 4-11 String Array Added to the Vector"
      
      

6. Map the string:

   1. Map the first item to a literal. The value of the literal should be the attribute value on the target system.

   2. Click Save. Figure 4-12 shows the string mapped to a literal in the process form.

   Figure 4-12 String Mapped to Literal

   
   Description of "Figure 4-12 String Mapped to Literal"
   
   

7. 1. Map the second item to the corresponding adapter variable:

   2. Click Save. Figure 4-13 shows the string mapped to the adapter variable in the process form.

   Figure 4-13 String Mapped to Adapter Variable

   
   Description of "Figure 4-13 String Mapped to Adapter Variable"
   
   

8. Map the variable to process data:

   1. Expand Process Management.

   2. Double-click Process Definition.

   3. Select Set the Exchange Related User Properties.

   4. Double-click Process Task and navigate to the Integration tab. The newly mapped variable will have the mapped status as N. Figure 4-14 shows the newly mapped variable in the process definition.

      Figure 4-14 Mapped Variable in Process Definition

      
      Description of "Figure 4-14 Mapped Variable in Process Definition"
      
      

9. 1. In the Map To field, select Process Data.

   2. In the Qualifier field, select the name of the form label, which you have entered in the form.

   3. Click Save. Figure 4-15 shows the adapter variable mapped to the process data field.

10. Figure 4-15 Variable Mapped to Process Data Field

    
    Description of "Figure 4-15 Variable Mapped to Process Data Field"
    
    

4.4 Configuring the Connector for Multiple Installations of the Target System

Note:

This section describes an optional procedure. Perform this procedure only if you want to configure the connector for multiple installations of the target system.

You may want to configure the connector for multiple installations of Microsoft Exchange. The following example illustrates this requirement:

The Tokyo, London, and New York offices of Example Multinational Inc. have their own installations of Microsoft Exchange. The company has recently installed Oracle Identity Manager, and they want to configure Oracle Identity Manager to link all the installations of Microsoft Exchange.

To meet the requirement posed by such a scenario, you must configure the connector for multiple installations of Microsoft Exchange.

To configure the connector for multiple installations of the target system:

See Also:

Oracle Identity Manager Design Console Guide for detailed instructions on performing each step of this procedure

1. Create and configure one IT resource for each target system installation.

   The IT Resources form is in the Resource Management folder. An IT resource is created when you import the connector XML file. You can use this IT resource as the template for creating the remaining IT resources, of the same IT resource type. For information about the procedure to create an IT resource, see "Creating the IT Resource".

2. Create copies of the reconciliation scheduled tasks for each installation of the target system. While creating a scheduled task, specify attribute values corresponding to the target system installation for which you are creating the scheduled task.

   Refer to "Reconciliation Scheduled Tasks" for information about the values to be specified for the scheduled task attributes.

3. Manually synchronize the lookup definitions in Oracle Identity Manager with the lookup field values on the target system.

When you use the Administrative and User Console to perform provisioning, you can specify the IT resource corresponding to the Microsoft Exchange installation to which you want to provision the user.

4.4.1 Creating Copies of the Connector

To create a copy of the connector:

1. Create copies of the IT resource, resource object, process form, provisioning process, scheduled tasks, and lookup definitions that hold attribute mappings.

2. Create a copy of the Lookup.Exchange.Configuration lookup definition. In the copy that you create, change the values of the following entries to match the details of the process form copy that you create.

   • ROExgInMsgSizeCol

   • ROExgOutMsgSizeCol

   See "Configuring the Lookup.Exchange.Configuration Lookup Definition" for information about these entries.

3. Map the new process tasks to the copy of the Lookup.Exchange.Configuration lookup definition.

4. If you have create a copy of the Lookup.AD.Configuration, then you must enter the name of the copy in the AD Configuration Lookup Code Key of the Lookup.Exchange.Configuration lookup definition.