Click Delete. Process Definition Form

12-12 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager – None – Waiting – Provisioning – Disabled

12.3.2.2.2 Mapping a Target Resource Field to Oracle Identity Manager

You can map the fields on a target resource or trusted source, as defined on the Reconciliation Fields tab of the associated resource definition, to applicable fields in Oracle Identity Manager. These mappings determine the fields that must be updated in Oracle Identity Manager in a reconciliation event. These mappings occur when you click one of the following on the Reconciliation Manager form: ■ The Create User or Create Organization button ■ The Link button on the Matched Users or Matched Organizations tab ■ The Establish Link button on the Processes Matched Tree tab For user discovery on a trusted source, you define the fields to be mapped from the User resource to fields in the User provisioning process. The fields that is, the user attributes to which you will map your trusted source fields are derived from the Users form. For organization discovery on a trusted source, you define fields to be mapped from the Oracle Identity Manager Organization resource to fields in the Oracle Identity Manager Organization provisioning process. The fields that is, the organization attributes to which you will map your trusted source fields are derived from the Organizations form. After you have accessed the provisioning process definition for the associated resource and selected the Reconciliation Field Mappings tab, use one of the two procedures described in the following sections. Mapping a Single Value Field To map a single value field:

1. Click Add Field Map.

The Add Reconciliation Field Mappings dialog box is displayed. 2. Select the field on the target system that you want to map from the menu in the Field Name field. Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form. 3. For trusted sources: Select a value from the User Attribute menu and click OK. Go to Step 4. For target resources: Double-click Process Data Field. Select the correct mapping from the Lookup dialog box and click OK. 4. If you are defining mapping for a trusted source, go to step 5. Set the Key Field for Reconciliation Matching check box for target resources only. If this check box is selected, Oracle Identity Manager evaluates if the value of this field on the provisioning process form matches the value of the field in the reconciliation event. All matched processes are displayed on the Processes Developing Provisioning Processes 12-13 Matched Tree tab of the Reconciliation Manager form. If this check box is deselected, Oracle Identity Manager does not require the value of this field to match the process form and reconciliation event for process matching.

5. Click Save.

The mapping for the selected fields is applied the next time a reconciliation event is received from the target resource or trusted source. Mapping a Multi-Value Field For Target Resources Only To map a multi-value field:

1. Click Add Table Map.

The Add Reconciliation Table Mappings dialog box is displayed. 2. Select the multi-value field on the target system that you want to map from the menu in the Field Name field. Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form. 3. Select the child table you defined on the target resources process form from the Table Name menu.

4. Double-click Process Data Field, and select the correct mapping from the Lookup

dialog box, and click OK. 5. Save and close the Add Reconciliation Table Mappings dialog box. 6. Right-click the multi-value field you just mapped, and select Define a property field map from the menu that is displayed. 7. Select the component child field you want to map. Oracle Identity Manager will automatically supply the field type based on what was entered for this field on the associated Resource Object form.

8. Double-click the Process Data Field field.

Select the correct mapping from the Lookup dialog box and click OK. 9. Set the Key Field for Reconciliation Matching check box. If this check box is selected, Oracle Identity Manager compares the field value on the provisioning process child form with the field value in the reconciliation event. All matching processes are displayed on the Processes Matched Tree tab of the Reconciliation Manager form. If you deselect this check box, the value of this field does not have to match on the process form and reconciliation event for process matching. Ensure that at least one component child field of each multi-valued field is set as a key field. This improves the quality of the matches generated on the Process Matched Tree tab. Note: To set a field as a key field, it must be set as required on the Object Reconciliation tab of the applicable resource. Note: Key fields must be set as required on the Object Reconciliation tab of the applicable resource. 12-14 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager 10. Repeat Steps 6 through 9 for each component child field defined on the multi-value field.

11. Click Save.

The mapping for the selected fields will be applied the next time a reconciliation event is received from the target resource.

12.3.2.2.3 Deleting a Mapping

This procedure is used to delete a mapping that has been established between a field in Oracle Identity Manager and a field on the target system or trusted source as defined on the Reconciliation Fields tab of the associated resource definition. To delete a mapping: 1. Go to the provisioning process definition for the associated resource.

2. Select the Reconciliation Field Mappings tab.

3. Select the field mapping you want to delete.

4. Click Delete Map.

The mapping for the selected field is deleted.

12.3.2.3 Administrators Tab

You use this tab to select the roles that can view, modify, and delete the current process definition. On this tab, when the Write check box is selected, the corresponding role can read and modify the current process definition. When the Delete check box is selected, the associated role can delete the current process definition.

12.3.2.3.1 Assigning a Role to a Process Definition

To assign a role:

1. Click Assign.

The Groups window is displayed. 2. Select the unassigned role, and assign it to the process definition.

3. Click OK.

The role is displayed in the Administrators tab. 4. To enable this role to view or modify, or view and modify the current process definition, double-click the corresponding Write check box. Otherwise, go to Step 5. 5. To enable this role to delete the current process definition, double-click the associated Delete check box. Otherwise, go to Step 6.

6. Click Save.

The role is assigned to the process definition.

12.3.2.3.2 Removing a Role From a Process Definition

To remove a role: 1. Highlight the role that you want to remove.

2. Click Delete.