4 Configuring an Application for a Connected Resource By Using the Flat File Connector
Learn about configuring and managing flat files for a connected resource by using the connector.
4.1 Configuring an Application for a Connected Resource
You can configure a flat file application for a connected resource and load entities into Oracle Identity Governance from the connector package by navigating to the Configure Application screen.
4.1.1 Navigating to the Configure Application Screen
To navigate to the Configure Application screen, you must log in to Identity Self Service and then choose the Applications box on the Manage tab. Then, on the Applications page, search for and configure the application into which you want to load entities.
- Log in to Identity Self Service either by using the System Administration account or an account with the ApplicationInstanceAdministrator admin role.
- On the Applications page, search for and select the application into which you want to load entities as follows: For example, search for and select an application named SFApp for the Salesforce connector.
- In the Search field, select the Name attribute from the drop-down list and then enter the search criterion.
- From the results that are returned in the table, select the application.
- Click Flat File on the toolbar, and then select Configure.
4.1.2 Providing Basic Information for a Connected Resource
You must provide configuration-related details on the Basic Information page. The connector uses these details while performing reconciliation.
4.1.3 Providing Settings Information for a Connected Resource
Apart from reviewing the provisioning, reconciliation, and organization settings for your application and customizing them if required, you must specify values for the mandatory parameters of the reconciliation jobs.
The Settings page provides a preview of all settings related to provisioning, reconciliation, and organizations. You can review these settings and customize them if required. On the Reconciliation tab of the Settings page, expand the Reconciliation Jobs section to view the reconciliation jobs that the connector automatically creates after you create a Target or an Authoritative application. At this point, you can delete any reconciliation jobs that you do not want to use. If required, you can also add new reconciliation jobs to meet your requirements.
Ensure that you enter values for the mandatory parameters (marked by the asterisk (*) symbol) of all the reconciliation jobs and then click Apply. A message stating that the flat file configuration was created successfully is displayed.
- Flat File Full
- Flat File Diff Sync
- Flat File Delete Sync
- Flat File Entitlement
- Flat File Delete
Flat File Full
The Flat File Accounts Loader reconciliation job is used for reconciling accounts from a flat file and creating corresponding accounts in Oracle Identity Governance. Use this reconciliation job for performing a full or incremental reconciliation run.
Table 4-2 describes the parameters of the Flat File Accounts Loader reconciliation job.
Table 4-2 Parameters of the Flat File Accounts Loader Job
Parameter | Description |
---|---|
FlatFile Instance Name | This parameter holds the connector display name that is displayed on the Basic Information page.
Default value: |
Flat File directory | Enter the name and complete path to the directory containing the flat file that the connector needs to parse.
Note: The OIG administrator must have read and write permissions on this directory. |
Archive directory |
Enter the name of the directory in which the processed flat files must be saved. If you do not specify a value for this attribute, the connector creates a directory named "archived" within the directory containing the flat file, and the processed files are saved in this location. Note: The OIG administrator must have read and write permissions on this directory to enable adding of the processed flat files to the archive directory. |
Filter | Enter the expression for filtering records that the reconciliation job must retrieve.
Sample value: For information about the filters expressions that you can create and use, see ICF Filter Syntax in Developing and Customizing Applications for Oracle Identity Governance. |
Incremental Recon Attribute |
Enter the name of the flat file column that holds the time stamp at which the record was last modified. The value in this attribute is used during incremental reconciliation to determine the newest or latest record reconciled from the flat file. Sample value: |
Latest Token |
This parameter holds the value of the Incremental Recon Attribute. Note: The reconciliation engine automatically enters a value for this attribute after execution. It is recommended that you do not change the value of this attribute. If you manually specify a value for this attribute, then the connector reconciles only user accounts that have been modified after the time stamp specified as the value of this parameter. If you want to perform a full reconciliation run, then clear the value in this field. |
Scheduled Task Name |
This parameter holds the name of the scheduled job. Default value: |
Flat File Diff Sync
The Flat File Accounts Diff Sync Reconciliation job is used for performing diff-based reconciliation.
-
Previous Flat File directory
This is the flat file containing all the accounts before delete.
-
Current Flat File directory
This is the flat file that is exported from the enterprise target system after accounts have been deleted in the enterprise target system.
When you run this reconciliation job, the connector will detect the accounts that are missing in the current flat file by comparing them with the accounts in the previous flat file, and will generate delete reconciliation events only for the missing accounts.
Table 4-3 describes the parameters of the Flat File Accounts Diff Sync Reconciliation job.
Table 4-3 Parameters of the Flat File Accounts Diff Sync Reconciliation Job
Parameter | Description |
---|---|
FlatFile Instance Name | This parameter holds the connector display name that is displayed on the Basic Information page.
Default value: |
Previous Flat File directory |
Enter the name and complete path of the flat file directory that contains the records from the enterprise target system that were present previously. |
Current Flat File directory |
Enter the name and complete path of the flat file directory that contains the current records from the enterprise target system. |
Archive directory |
Enter the name of the directory in which the processed flat files must be saved. If you do not specify a value for this attribute, the connector creates a directory named "archived" within the directory containing the flat file, and the processed files are saved in this location. Note: The OIG administrator must have read and write permissions on this directory to enable adding of the processed flat files to the archive directory. |
Sync Token |
If you are using this reconciliation job for the first time, do not specify a value for this parameter. For subsequent runs, the reconciliation engine automatically enters a value for this parameter. Sample value: |
Scheduled Task Name |
This parameter holds the name of the scheduled job. Default value: |
Flat File Delete Sync
The Flat File Accounts Delete Sync Reconciliation job is used to perform a delete reconciliation run.
-
Delete Attribute
-
Delete Attribute Value
If you do not specify a value for the preceding attributes, then all the records in the flat file are considered as deleted records.
Table 4-4 describes the parameters of the Flat File Accounts Delete Sync Reconciliation job.
Table 4-4 Parameters of the Flat File Accounts Delete Sync Reconciliation Job
Parameter | Description |
---|---|
FlatFile Instance Name | This parameter holds the connector display name that is displayed on the Basic Information page.
Default value: |
Flat File directory | Enter the name and complete path to the directory containing the flat file that the connector needs to parse.
Note: The OIG administrator must have read and write permissions on this directory. |
Archive directory |
Enter the name of the directory in which the processed flat files must be saved. If you do not specify a value for this attribute, the connector creates a directory named "archived" within the directory containing the flat file, and the processed files are saved in this location. Note: The OIG administrator must have read and write permissions on this directory to enable adding of the processed flat files to the archive directory. |
Delete Attribute |
Enter the name of the column in the flat file that represents whether an account is deleted or not. Enter a value for this attribute if you want to perform filtered delete reconciliation. Default value: None Sample value: |
Delete Attribute Value |
Enter the value that is mentioned in the column that specifies whether an account is deleted. This column is the value that you specified as the value of the Delete Attribute parameter. Sample value: |
Sync Token |
If you are using this schedule job for the first time, do not specify a value for this attribute. For subsequent runs, the reconciliation engine automatically enters a value for this attribute. Sample value: |
Scheduled Task Name |
This parameter holds the name of the scheduled job. Default value: |
Flat File Entitlement
The Flat File Entitlements Loader reconciliation job is used to reconcile both lookup values and entitlements from a flat file.
In addition to reconciling the lookups from a flat file, this reconciliation job also adds the entitlements for lookups that are associated with an Entitlement, and synchronizes the catalog with the entitlements automatically. The Flat File Entitlements Loader reconciliation job also supports full and incremental reconciliation of lookup values and entitlements.
Table 4-5 describes the parameters of the Flat File Entitlements Loader reconciliation job.
Table 4-5 Parameters of the Flat File Entitlements Loader Reconciliation Job
Parameter | Description |
---|---|
FlatFile Instance Name | This parameter holds the connector display name that is displayed on the Basic Information page.
Default value: |
Flat File directory | Enter the name and complete path to the directory containing the flat file for your entitlements that the connector needs to parse.
Note: The OIG administrator must have read and write permissions on this directory. |
Archive directory |
Enter the name of the directory in which the processed flat files must be saved. If you do not specify a value for this attribute, the connector creates a directory named "archived" within the directory containing the flat file, and the processed files are saved in this location. Note: The OIG administrator must have read and write permissions on this directory to enable adding of the processed flat files to the archive directory. |
Lookup Name |
Enter the name of the lookup definition into which the connector must load all the values fetched from the flat file for entitlements. Note: The name of this lookup definition must be the same as the one that you specified on the Schema page for Entitlement lookup. Sample value: |
Code Key Attribute | Enter the name of the flat file attribute whose values you want to populate into the Code Key column the of lookup definition specified as the value of the Lookup Name parameter. |
Decode Attribute | Enter the name of the flat file attribute whose values you want to populate into the Decode column of the lookup definition specified as the value of the Lookup Name parameter. |
Mode | Enter the mode in which the job must run. The possible value for this parameter are:
Default value: |
Is Entitlement? |
Enter Enter This flag will decide if the ENT_LIST and Catalog should be updated with the lookup values. Default value: |
Flat File Delete
The Flat File Accounts Delete Reconciliation job is used to reconcile data about deleted accounts. During a reconciliation run, for each account deleted on the enterprise target system, the corresponding OIG account is deleted.
Use this reconciliation job if you cannot export flat files containing only a list of deleted accounts, but can periodically export flat files containing all accounts in the enterprise target system.
Note:
This process is resource consuming as Oracle Identity Governance has to verify all the records from the flat file and compare it with existing records to identify whether each record has been deleted or not.
Table 4-6 describes the parameters of the Flat File Accounts Delete Reconciliation job.
Table 4-6 Parameters of the Flat File Accounts Delete Reconciliation Job
Parameter | Description |
---|---|
FlatFile Instance Name | This parameter holds the connector display name that is displayed on the Basic Information page.
Default value: |
Flat File directory | Enter the name and complete path to the directory containing the flat file that the connector needs to parse.
Note: The OIG administrator must have read and write permissions on this directory. |
Archive directory |
Enter the name of the directory in which the processed flat files must be saved. If you do not specify a value for this attribute, the connector creates a directory named "archived" within the directory containing the flat file, and the processed files are saved in this location. Note: The OIG administrator must have read and write permissions on this directory to enable adding of the processed flat files to the archive directory. |
4.2 Managing Flat File Configurations for a Connected Application
You can edit any flat file configuration that you have created for a connected application by using the Manage option for Flat Files.