Mapping Oracle Identity Manager Attributes

Using the Callback Service 4-5 Mapped attribute names are used in messages sent as well as in callback configuration particularly, in the ConstraintAttribute parameter. Table 4–1 defines how Oracle Identity Manager user type attributes are represented in callbacks using SPML PSOs. Table 4–1 Oracle Identity Manager Callback Service User Attribute Mapping Callback Service Attribute PSO Oracle Identity Manager User Attribute activeEndDate End Date activeStartDate Start Date commonName Common Name countryName Country departmentNumber Department Number description Description displayName Full Name employeeNumber Employee Number employeeType Role facsimileTelephoneNumber Fax generationQualifier Generation Qualifier hireDate Hire Date homePhone Home Phone homePostalAddress Home Postal Address initials Initials localityName Locality Name mail Email middleName Middle Name mobile Mobile organization LDAP Organization organizationUnit LDAP Organization Unit pager Pager password Password postalAddress Postal Address postalCode Postal Code postOfficeBox PO Box preferredLangauage Language state State street Street surname Last Name telephoneNumber Telephone Number title Title userId usr_key userName User Login 4-6 Oracle Fusion Middleware Developers Guide for Oracle Identity Manager Table 4–2 defines how Oracle Identity Manager role type attributes are represented in callbacks using SPML PSOs. If the attribute name is not in either of these tables, it is referenced by its Oracle Identity Manager attribute.

4.3 Sending Event Callbacks

By default, callbacks are enabled sent for all Oracle Identity Manager events listed in EventHandlers.xml, the handler invoked by the Orchestration Engine during the post-processing stage of the provisioning process. Each event specifies the applicable entity type and operation. Specific callbacks may be disabled by changing the configuration. Table 4–3 summarize the user and role events for which Oracle Identity Manager makes callbacks and the information returned with the callback. Table 4–2 Oracle Identity Manager Callback Service Role Attribute Mapping Callback Service Attribute PSO Oracle Identity Manager Role Attribute commonName Role Name description Role Description displayName Display Name Table 4–3 Callback Initiated Events Entity Operation Event Initiator Returned in Post-Processing Handler Returned in Status Change Plugin Callback User Create Third party requests only. No callbacks when a user is created using the console or through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ Provisioning Service Object PSO with created attributes and values except password and challenge questions Note: PSO is used for create operations. Modification objects are used for modify operations. ■ Roles assigned to the user ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID User Modify All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ Modification object with modified attributes and values except password and challenge questions ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID Using the Callback Service 4-7 User Delete All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID User Suspend disable All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID User Resume enable All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID User Assign Role - add memberOf All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ Modification object with GUIDs of assigned roles ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID User Revoke Role - delete memberOf All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ Modification object with GUIDs of assigned roles ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID Role Add Third party requests only. No callbacks when a role is created using the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ PSO with created attributes and values ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID Role Modify All sources: third party requests, the console and through a reconciliation event. ■ Target Type ■ Target GUID ■ Operation ■ Request ID ■ Modification object with modified attributes and values ■ OIM Request Status ■ Target Type ■ Target GUID ■ Operation ■ Request ID Table 4–3 Cont. Callback Initiated Events Entity Operation Event Initiator Returned in Post-Processing Handler Returned in Status Change Plugin Callback