Step 6: Bulk Update Federation Status

After federation has been tested successfully for a single user, you can update the federation status for existing people in bulk. Bulk updating federation status is a one-time operation for existing people and is completed in OCI IAM by exporting users, editing the federation flag, and importing the users back into OCI IAM.

Note:

Do not add, edit, or delete users from the OCI Console. The only supported methods for ongoing user updates are People Management and Simphony APIs, such as the Labor API and C&C API.

Download the List of Users from OCI IAM

  1. Sign in to https://cloud.oracle.com/.
  2. Go to the identity domain used for Simphony.
  3. Go to User management.

  4. Select Actions, and then select Export all users.

    This starts an export job. Check the export job status under Identity Domain, Reporting, Jobs.

  5. When the export job is complete, download the generated .csv file.

Edit the Federation Flag

  1. Add a new column named Federated to the exported .csv file.
  2. Set the value to TRUE for all people you want to federate, and set the value to FALSE for all non-federated people.

Import the CSV File to OCI IAM

  1. Sign in to https://cloud.oracle.com/.
  2. Go to the identity domain used for Simphony.
  3. Go to User management.

  4. Select Actions, and then select Import users.

    Select the updated .csv file.

    This starts an import job. Check the import job status under Identity Domain, Reporting, Jobs.

  5. When the import job is complete, verify the federation status of updated people in People Management.

Duplicate Email Addresses

Only primary accounts should be federated. During migration, people with the same email address are grouped together. The primary account keeps the original email address. Secondary accounts receive an aliased email address using the person's user name.

The primary account is selected using the following order:
  1. Most recent login activity within the last 90 days.
  2. If no recent login activity exists, Hierarchy Administrator.
  3. If no Hierarchy Administrator exists, Functional Administrator.
  4. If no Functional Administrator exists, the first user in the system.

To switch the primary account, update the federation status for both accounts in People Management.

Account Type User Name Work Email
Secondary account BSMITH2 bob.smith+bsmith2@company.com
Primary account BSMITH bob.smith@company.com

Note:

Only federate the primary account with the non-aliased email address. Do not federate secondary accounts that use aliased email addresses.