Click Delete Field. Managing Resources By Using the Design Console

11-74 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager Another addition in this release is the attribute authoritative sources feature. This means sources are trusted for only attributes of the identities and not the identities themselves. You can configure attribute authoritative source reconciliation by creating appropriate reconciliation action rules. If no process match is found, it is assigned to the administrator. This ensures that a user is not created by mistake even if there are no matches found. If a process match is found, the reconciliation action rule will establish a link. The following sections discuss two use cases in which you can implement multiple trusted source reconciliation: ■ Multiple Trusted Source Reconciliation Using MTS-Compatible Connectors ■ Multiple Trusted Source Reconciliation Using Connectors That Are Not MTS-Compatible

11.9.4.3.1 Multiple Trusted Source Reconciliation Using MTS-Compatible Connectors

The following sections discuss scenarios in which you can implement multiple trusted source reconciliation by using MTS-compatible connectors: ■ Configuring MTS-Compatible Connectors for Trusted Source Reconciliation by User Type ■ Configuring MTS-Compatible Connectors for Trusted Source Reconciliation of Specific OIM User Attributes Configuring MTS-Compatible Connectors for Trusted Source Reconciliation by User Type In this context, user type refers to the type of users whose records you want to reconcile. Examples of user types are Employee and Customer. Note: If the resource object is for target resource reconciliation, then the mapping is between the reconciliation fields and process data fields. Do not use any resource objects that are defined as a trusted source for provisioning activities. These resources are meant to be used only for OIM Users reconciliation. Note: At some places in this document: - Multiple trusted source reconciliation has been referred to as MTS. - The terms fields and attributes have been used interchangeably. Note: For both use cases, create reconciliation profiles by referring to Creating New Reconciliation Profiles in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager. Note: To determine whether or not your connector is MTS-compatible, see connector-specific documentation. Developing Resource Objects 11-75 To implement trusted source reconciliation by user type, perform the procedure to implement trusted source reconciliation while deploying the connectors of each target system that you want to configure as a trusted source. During reconciliation, all the target system records of the specified user types are reconciled. If the target systems contain multiple user types, you can use the Limited Reconciliation feature to specify the user type for which records must be reconciled from each target system. Configuring MTS-Compatible Connectors for Trusted Source Reconciliation of Specific OIM User Attributes You might want to configure trusted source reconciliation for specific OIM User attributes from multiple target systems. The procedure to implement this is described with the help of the following sample scenario: You want to reconcile identities from one target system, for example TS1, and specific attributes of these identities for example attr1, attr2, and attr3 from another target system, for example TS2. This means that TS1 is the trusted source for the identities, and TS2 is the trusted source for specific attributes of those identities and not the identities themselves. TS1 must provide all the mandatory OIM User attributes for the successful creation of an OIM User. TS2 will provide only those OIM User attributes either a mandatory OIM User attribute or a non-mandatory one for which TS2 is the trusted source. If you reconcile a mandatory OIM User attribute from TS2, the value of this attribute overwrites the value contained in this attribute after the OIM User is created from TS1. If you want to reconcile only non-mandatory OIM User attributes from TS2, you can choose not to reconcile these attributes from TS1 during OIM User creation. For the TS1 connector: 1. Perform all the steps required to deploy the TS1 connector and configure it for trusted source reconciliation. 2. In the Reconciliation Fields tab on the Object Reconciliation page, delete all the TS1 attributes that you want to reconcile from TS2 in this case attr1, attr2, and attr3 . 3. In the Reconciliation Field Mappings tab on the Process Definition page, delete all the mappings other than the ones you want to retain. Instead of deleting reconciliation fields, you can remove the reconciliation field mappings of those fields for which you do not want to reconcile the values into the OIM User created through reconciliation. 4. In the Reconciliation Action Rules tab on the Object Reconciliation page, ensure that the following rule condition and action mappings exist: Rule Condition: No Matches Found Action: Create User Note: When there are multiple trusted sources, the logic to reconcile the entity attributes from the trusted sources is provided by the connector. See Also: The documentation for the connector you are deploying for information about the procedure to configure trusted source reconciliation