5.3.1 Guidelines on Performing Provisioning Operations
These are the guidelines that you must apply while performing provisioning operations.
Provisioning Prerequisites:
These parameters are required for user provisioning. These values must be added to the design console in the Lookup definition as createType and Type must be passed as static Lookup and values must be mapped as provided in the following steps:.
- Add Code Key and Decode Key for
Lookup.Zoom.createType Lookupas provided in the following design console under LookupDefinition.Table 5-1 Code Key and Decode Key
Code Key Decode Key create create autoCreate autoCreate custCreate custCreate ssoCreate ssoCreate - Add Code Key and Decode Key for Lookup.Zoom.type as below in design console under LookupDefinition.
Table 5-2 Code Key and Decode Key
Code Key Decode Key 1 Basic 2 Licensed 3 On-prem 99 None
Provisioning attributes required to create user account
To create User provisioning operation, follow the following values as required:
- First Name: The user's first name.
- Last Name: The user's last name.
- Email: The user's email ID. (You must have managed domain registered with Zoom to update email.)
- Type: The user's license type. The Default type is Basic.
- Password: The password of the user, which is applicable only when autoCreate option is selected.
Note:
- Permission requirements that are required to provision the user type with On-Prem from zoom support.
- Passwords can only be updated for Zoom accounts that were created using a work email. Passwords cannot be changed for accounts that were created using custCreate, SSO, Sign in With Google and Sign In With Facebook options
- Target does not allow to create the user with the email id which has already been used in Zoom cloud.
- Create action type is not a target attribute so we cannot update it, incase if you update it also nothing is updated in target and does not throw any error.
- Permission requirements that are required to provision the user type with On-Prem from zoom support.
- Target does not allow to create the user with the email id which has already been used in zoom cloud.
Attributes required to be updated in the parent form
- First Name: The user's first name.
- Last Name: The user's last name.
- Email: The user's email ID. (You must have managed domain registered with Zoom to update email.)
- Type: The user's license type. The Default type is Basic.
- Password: The password of the user.
Note:
- Only users provisioned with SSO can set the user type to None.
- Permission requirements that are required to provision the user type with On-Prem from zoom support.
- Passwords can be updated for Zoom accounts that were created using a work email. Passwords cannot be changed for accounts that were created using custCreate, SSO, Sign in With Google and Sign In With Facebook options.
- Target does not allow to create the user with the email id which has already been used in Zoom cloud.
- Create action type is not a target attribute so we cannot update it, if you update it also nothing is updated in target and does not throw any error.
Delete/Revoke a User
By default, you can delete all types of users, but to delete a pending user, update the rel URL action to disassociate. Default rel URL for delete
"__ACCOUNT__.DELETEOP=/$(api_version)$/users/$(__UID__)$?action=delete" Update the rel URL to delete pending user. "__ACCOUNT__.DELETEOP=/$(api_version)$/users/$(__UID__)$?action=disassociate"Note:
If the pending users must be deleted from OIM and pending users list in Target, you must update the rel URL as above. Also, you must identify the pending user and select and delete the User from OIM so that users can be revoked in OIM and deleted in Target from pending user's list.