Select the Required check box.

Developing Resource Objects 11-73 Adding a Reconciliation Action Rule To add a reconciliation action rule:

1. Click Add Field.

The Add a new Action Rule dialog box is displayed. 2. Select the desired value from the Rule Condition menu. This is the matching condition that will cause the associated action to be executed. Each match condition can only be assigned to a single rule action.

3. Select a value from the Rule Action menu.

This is the action that will be executed if the matching condition is met.

4. Click Save, and close the Add a new Action Rule dialog box.

Deleting a Reconciliation Action Rule To delete a reconciliation action rule: 1. Select the matching action combination to delete.

2. Click Delete.

The reconciliation action rule will be removed and the action associated with its condition will not be executed automatically.

11.9.4.3 Multiple Trusted Source Reconciliation

In earlier releases, you could set up only the Xellerate User resource object as a trusted source to reconcile identities. Now, you can do this by creating the reconciliation fields, reconciliation action rules, field mappings, and matching roles for the Xellerate User resource object and the process definition. If there are two trusted sources from which you want to reconcile identities to create OIM Users, you are not able to configure a single resource object Xellerate User for both the trusted sources. Even if you create reconciliation fields for both the trusted sources in the Xellerate User resource object, you cannot create the corresponding reconciliation field mappings in the Xellerate User process definition. From release 9.1.0 onward, you can configure resource objects other than Xellerate User as trusted sources for identity reconciliation. You can do this by selecting the Trusted Source check box in the Resource Objects form while creating a resource object. For a resource object to which the Trusted Source flag is attached, you can create multiple reconciliation fields to denote the target system fields. You can also configure the reconciliation action rule in which if there are no process matches found, either a user is created or the data is sent to the administrator or authorizer for identity creation. If a process match is found, the link is established. When defining provisioning process for trusted source resources, do not attach user-defined process forms. For these provisioning processes, reconciliation field mappings can be created between reconciliation fields defined on the resource and OIM User attributes. 11-74 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager Another addition in this release is the attribute authoritative sources feature. This means sources are trusted for only attributes of the identities and not the identities themselves. You can configure attribute authoritative source reconciliation by creating appropriate reconciliation action rules. If no process match is found, it is assigned to the administrator. This ensures that a user is not created by mistake even if there are no matches found. If a process match is found, the reconciliation action rule will establish a link. The following sections discuss two use cases in which you can implement multiple trusted source reconciliation: ■ Multiple Trusted Source Reconciliation Using MTS-Compatible Connectors ■ Multiple Trusted Source Reconciliation Using Connectors That Are Not MTS-Compatible

11.9.4.3.1 Multiple Trusted Source Reconciliation Using MTS-Compatible Connectors

The following sections discuss scenarios in which you can implement multiple trusted source reconciliation by using MTS-compatible connectors: ■ Configuring MTS-Compatible Connectors for Trusted Source Reconciliation by User Type ■ Configuring MTS-Compatible Connectors for Trusted Source Reconciliation of Specific OIM User Attributes Configuring MTS-Compatible Connectors for Trusted Source Reconciliation by User Type In this context, user type refers to the type of users whose records you want to reconcile. Examples of user types are Employee and Customer. Note: If the resource object is for target resource reconciliation, then the mapping is between the reconciliation fields and process data fields. Do not use any resource objects that are defined as a trusted source for provisioning activities. These resources are meant to be used only for OIM Users reconciliation. Note: At some places in this document: - Multiple trusted source reconciliation has been referred to as MTS. - The terms fields and attributes have been used interchangeably. Note: For both use cases, create reconciliation profiles by referring to Creating New Reconciliation Profiles in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager. Note: To determine whether or not your connector is MTS-compatible, see connector-specific documentation.