Manually Linking Accounts

Waveset provides several mechanisms that can be used to assign accounts when correlation and confirmation rules do not find a match.

Using the Account Index

The Account Index records the last known state of each resource account known to Waveset. It is primarily maintained by reconciliation, but other Waveset functions will also update the Account Index, as needed.

Load from resource, load from file, and bulk actions do not update the Account Index.

To view the account index, click the Resources tab, then click the Account Index link on the left. Then navigate to a resource to display the status of all accounts on that resource.

When you right-click on an uncorrelated account (represented in the Account Index table with a situation of “UNMATCHED” and an Owner of “_UNKNOWN_”), Waveset displays a menu that presents you with the options of creating a new Waveset user account, running reconciliation on a single account using the reconciliation policy in effect for the resource, specifying an owner, or deleting or disabling the resource account. If you select the “Specify Owner” option, Waveset displays a screen that allows you to search for owners that might criteria that you specify. Refer to Business Administrator's Guide for more information.

Enabling Self-Discovery

The Waveset User Interface can be configured to allow Waveset users to discover their own resource accounts. This means that a user with an Waveset identity can associate it with an existing, but unassociated, resource account. Self-discovery can be enabled only on resources that support pass-through authentication.

To enable self-discovery, you must edit the End User Resources configuration object, and add to it the name of each resource on which the user will be allowed to discover accounts.

To Enable Self-Discovery

1. Access the Waveset debug page at http://PathToIDM/debug. The System Settings page is displayed.

2. Select Configuration from the List Objects pull-down menu. The List Objects of type: Configuration page is displayed.

3. Select the edit link for End User Resources.

4. After the <List> element, add <String>Resource</String>, where Resource matches the name of a resource object in the repository. For example, to allow users to self-discover their accounts on resources AD and Solaris, edit the <List> element as follows:

   <List>
      <String>AD</String>
      <String>Solaris</String>
   </List>

5. Save your changes. Waveset returns to the System Settings debug page.

   When self-discovery is enabled, the user is presented with a new menu item on the Waveset User Interface (Inform Waveset of Other Accounts) This area allows him to select a resource from an available list, and then enter the resource account ID and password to link the account with his Waveset identity.