Requirement for Generic Technology Connectors

Understanding Generic Technology Connectors 18-5 ■ Provisioning Staging A provisioning staging data set holds user data before it is sent to the provisioning format provider. This data is the output of the transformation functions that are run on the user data for a trusted source or account data for a target system, which are stored in Oracle Identity Manager. This data set can have child data sets. ■ Provisioning Format Provider A provisioning format provider converts Oracle Identity Manager provisioning data received from the transformation provider into a format that is supported by the target system. ■ Provisioning Transport Provider A provisioning transport provider carries provisioning data from the provisioning format provider to the target system. The manner in which this provider carries reconciliation data depends on the implementation of the provider. For example, a provider can copy data into a file, or send data to a Web service, or post data to a database.

18.2.3 Oracle Identity Manager Data Sets

The Oracle Identity Manager data sets represent data that is stored in Oracle Identity Manager. Although these data sets are not part of the reconciliation or provisioning module, they are considered part of the generic technology connector because you can add fields to these data sets and create mappings between fields of these data sets and other data sets. The following are the Oracle Identity Manager data sets: ■ OIM - User The OIM - User data set holds the metadata set of identity fields that defines the Oracle Identity Manager User. In trusted source reconciliation, this data set receives newly created or modified user account information from the reconciliation staging data set. In target resource reconciliation, the fields of the OIM - User data set can be used to establish a match between target system user accounts and existing Oracle Identity Manager users. This data set does not have child data sets. ■ OIM - Account The OIM - Account data set holds the user account information that is stored in the process form fields of Oracle Identity Manager. This user account information is received from the reconciliation staging data sets. The OIM - Account data set can have child data sets.

18.3 Features of Generic Technology Connectors

The following sections discuss the features of generic technology connectors: ■ Features Specific to the Reconciliation Module ■ Other Features

18.3.1 Features Specific to the Reconciliation Module

The following features are specific to the reconciliation module: ■ Trusted Source Reconciliation ■ Account Status Reconciliation 18-6 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager ■ Full and Incremental Reconciliation ■ Batched Reconciliation ■ Reconciliation of Multivalued Attribute Data Child Data Deletion ■ Failure Threshold for Stopping Reconciliation

18.3.1.1 Trusted Source Reconciliation

A generic technology connector can be used for trusted source reconciliation. During reconciliation in trusted mode: ■ If the reconciliation engine detects new target system accounts, it creates corresponding Oracle Identity Manager users. ■ If the reconciliation engine detects changes to existing target system accounts, the same changes are made in the corresponding Oracle Identity Manager users. A generic technology connector that is used for trusted source reconciliation cannot be used for provisioning. This design feature was incorporated to ensure that you do not create or modify through Oracle Identity Manager user account information on a target system that is designated as a trusted source. Connector objects, such as IT resources and resource objects, are created automatically at the end of the generic technology connector creation process. By default, the resource object of a generic technology connector is a trusted resource object. In other words, a generic technology connector is already compatible with the Multiple Trusted Source reconciliation feature. This feature is discussed in Chapter 12, Developing Provisioning Processes .

18.3.1.2 Account Status Reconciliation

User account status information is used to track whether or not the owner of a target system account is to be allowed to access and use the account. If the target system does not store account status information in the format in which it is stored in Oracle Identity Manager, you can use the predefined translation transformation provider to implement account status reconciliation. Note: While creating a generic technology connector, if you do not select the Trusted Source reconciliation option, target resource reconciliation is enabled. In target resource reconciliation, only modifications to target system accounts are reconciled. New target system accounts detected during reconciliation are not created automatically in Oracle Identity Manager. Note: In trusted source reconciliation, the reconciliation of multivalued child data is not supported.