3.4.1 Correlation Rules for the Target Application

When you create a target application, the connector uses correlation rules to determine the identity to which Oracle Identity Governance must assign a resource.

Predefined Identity Correlation Rules

By default, the ARCON Privileged Access Management connector provides a simple correlation rule when you create a target application. The connector uses this correlation rule to compare the entries in Oracle Identity Governance repository and the target system repository, determine the difference between the two repositories, and apply the latest changes to Oracle Identity Governance.

The following table lists the default simple correlation rule for a ARCON Privileged Access Management connector. If required, you can edit the default correlation rule or add new rules. You can create complex correlation rules also. For more information about adding or editing simple or complex correlation rules, see Updating Identity Correlation Rules in Oracle Fusion Middleware Performing Self Service Tasks with Oracle Identity Governance.

Table 3-11 Predefined Identity Correlation Rule for an ARCON Privileged Access Management Connector

Target Attribute	Element Operator	Identity Attribute	Case Sensitive?
__NAME__	Equals	User Login	No

In this identity rule:

• __NAME__ is a single-valued attribute on the target system that identifies the user account.
• User Login is the field on the OIG User form.

The following figure shows the Simple Correlation Rule for ARCON Privileged Access Management Target Application

Figure 3-9 Simple Correlation Rule for ARCON Privileged Access Management Target Application

Predefined Situations and Responses

The ARCON Privileged Access Management connector provides a default set of situations and responses when you create a target application. These situations and responses specify the action that Oracle Identity Governance must take based on the result of a reconciliation event.

The following table lists the default situations and responses for a ARCON Privileged Access Management Target application. If required, you can edit these default situations and responses or add new ones. For more information about adding or editing situations and responses, see Updating Situations and Responses Updating Situations and Responses in Oracle Fusion Middleware Performing Self Service Tasks with Oracle Identity Governance.

Table 3-12 Predefined Situations and Responses for a ARCON Privileged Access Management Target Application

Situation	Response
No Matches Found	None
One Entity Match Found	Establish Link
One Process Match Found	Establish Link

The following figure shows the situations and responses for a ARCON Privileged Access Management that the connector provides by default.

Figure 3-10 Predefined Situations and Responses for a ARCON Privileged Access Management Target Application