The AS400 connector has extended a number of supported attributes, as compared to previous releases of the OS/400 Oracle Identity Manager connector. Some of the new attributes (for example, First Name and Last Name) are stored in an OS/400 Directory Entry object. Directory Entries were not used by previous releases of the connector.
Sources of OS/400 accounts without Directory Entries include:
An account provisioned by the legacy OS/400 Oracle Identity Manager connector
An account created manually by an OS/400 administrator
The AS400 connector has the following policy for the creation of a Directory Entry:
A new OS/400 account is provisioned.
An OS/400 account attribute is updated.
The AS400 connector does not create a Directory Entry if a search or reconciliation operation is performed.
The AS400 connector uses two objects to save OS/400 account attributes: User Profile and Directory Entry. These entities are mapped as follows on connector operations:
Create operation: New users created by the connector will have both a Directory Entry and a User Profile.
Delete operation: Legacy users without a Directory Entry will be logged in with a warning for a delete operation.
Search operation: For legacy users without a Directory Entry, empty attribute values will be returned (if attributes of a Directory Entry are requested by the search operation).
Update operation: If the Directory Entry is missing for an account, the connector will create an empty Directory Entry for the OS/400 account.