Sun Identity Manager Deployment Guide

ProcedureTo Load LDAP Accounts

  1. From the Resources page in the Administrator Interface, select the LDAP resource from the New Resource pull-down menu. Then configure the adapter as follows:

    1. Add the EmployeeId and email Identity Manager User attributes.

    2. Make sure you do not delete the accountId Identity Manager user attribute from the schema map.

    3. Ensure that the identity template is correct.

      See the online help and the Resource Reference for more information about configuring the adapter.

  2. Configure the reconciliation policy for the resource as follows.

    1. Set the Correlation Rule to Correlate EmployeeId with accountId.

    2. Set the following situation values:

      Set the UNASSIGNED situation to “Link resource account to Identity Manager user”.

      Set the UNMATCHED situation to an appropriate action. You might need to discuss with the PeopleSoft administrator about the possibility of adding users who are discovered on other resources. If you select the “Create new Identity Manager user based on resource account” option, the Identity Manager user will have, by default, an account name based on the LDAP cn attribute.

  3. Reconcile the LDAP resource.