Reconciliation APIs Reconciliation Architecture

Deployment Configurations 4-15 For user and role entities owner matching is performed. For account entities, when no record is found, an owner match is then performed to identify the owner of the account. For role membership events, matching is performed to identify role and user. For role hierarchy events, matching is performed to identity the parent and child role. At the end of the evaluation, the match table contains all the possible matches found within Oracle Identity Manager that meet the criteria for the event, and the state of the event is updated to one of the statuses listed in Table 4–3 : Note: While performing role hierarchy and role membership reconciliation, the matching criteria must contain both Namespace and Role Name in the matching criteria. The following is an example of a matching rule: UGP.ugp_rolename=x and UGP.ugp_namespace=y Here, x is the name of the horizontal table name column that is mapped to Role Name, and y is the name of the horizontal column that is mapped to Namespace. Table 4–3 Reconciliation Status Events Status Events Description Data Received Event data has been created in the database and is ready for further processing. Event Received A reconciliation event has been created and is ready for further processing. The finishReconciliationEvent API has not yet been called. Data Validation Failed The reconciliation event record is invalid. For example, a role event with an invalid role category will fail to validate. This situation could indicate a race condition. The RE_NOTE field should contain the details of the failure, which is also displayed in the user interface. Data Validation Succeeded The event data was successfully validated and the event can now safely be processed by the Engine. Multiple Accounts Match Found Given the current matching rules, multiple matching account records were found for the data. No Account Match Found Given the current matching rules, no matching account records were found for the data. Single Account Match Found Given the current matching rules, one matching account record was found for the data. Multiple Org Matches Found Given the current matching rules, multiple matching organization records were found for the data. No Org Match Found Given the current matching rules, no matching organization records were found for the data. Single Org Match Found Given the current matching rules, one matching organization record was found for the data. Multiple Role Grants Match Found Multiple matching records for user membership within a role were found. No Role Grant Match Found No matching records for user membership within a role were found.