Provisioning Notes

This section contains a table that summarizes the provisioning capabilities of the adapter. These capabilities include:

• Enable/Disable Account. The ability to enable and disable user accounts is determined by the resource. For example, on some UNIX systems, an account is disabled by changing the password to a random value.

• Rename Account. The ability to rename user accounts is determined by the resource.

• Pass-Through Authentication. A Identity Manager feature that enables resource users to log in to the Identity Manager User interface.

• Before/After Actions. Actions are scripts that run within the context of a managed resource, if native support exists for scripted actions.

  For example, on UNIX systems, actions are sequences of UNIX shell commands. In Microsoft Windows environments, actions are DOS-style console commands that can execute within the CMD console.

• Dataloading Methods. Indicates how data can be loaded into Identity Manager. The following methods are supported:

  • Active Sync. Allows information that is stored in an “authoritative” external resource (such as an application or database) to synchronize with Identity Manager user data. The adapter can push or pull resource account changes into Identity Manager.

  • Discovery (load from resource). Initially pulls resource accounts into Identity Manager, without viewing before loading. Resource account information can also be imported from or exported to a file.

  • Reconciliation. Periodically pull resource accounts into Identity Manager, taking action on each account according to configured policy. Use the reconciliation feature to highlight inconsistencies between the resource accounts on Identity Manager and the accounts that actually exist on a resource, and to periodically correlate account data.