Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
Next revision Both sides next revision
tutorial:adm:czechidm_installation_finalize [2019/06/24 14:57]
apeterova DeleteProvisioningArchiveTaskExecutor 		tutorial:adm:czechidm_installation_finalize [2019/08/05 15:23]
apeterova provisioning of subordinates
Line 63: Line 63:
 idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter
 idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter
 +</code>
 +  
 +==== Configure subordinates provisioning ====
 +
 +Sometimes, we provision some details about the manager to the identity accounts. E.g. the attribute "manager" in Active Directory is the link to the user's manager. To make this link up-to-date, IdM does provisioning for new and original subordinates of the manager every time, when the manager's contract changes.
 +
 +If you don't need this functionality, which can be time consuming, switch it off like this:
 +
 +<code properties>
 +idm.sec.acc.processor.identity-contract-provisioning-processor.includeSubordinates=false
 +idm.sec.acc.processor.identity-contract-before-save-processor.includeSubordinates=false
 </code> </code>
      
Line 68: Line 79:
  
 Review the [[devel:documentation:scheduled_task|scheduled tasks]] in **Settings** -> **Task scheduler**.  Review the [[devel:documentation:scheduled_task|scheduled tasks]] in **Settings** -> **Task scheduler**. 
 +
 +By default, connected system's synchronization is not scheduled. To do so, you have to add it. Add a new scheduled task SynchronizationSchedulableTaskExecutor, fill in the Synchronization uuid which you can find by opening a synchronization of your system in the URL of the page following synchronization-configs. So, if you have a URL "http://localhost:8080/idm/#/system/f5h4bd76-9218-5fz8-7e5u-0ds772ag968u/synchronization-configs/94b6thj6-2nb1-84g2-sfd2-dgd4f99adsf24/detail?_k=uct1ra", the UID is "94b6thj6-2nb1-84g2-sfd2-dgd4f99adsf24". Save the event and click Add under Scheduled starts. To run the event periodically, set a [[tutorial:adm:create_and_configure_trigger|CRON trigger]].
  
 If you don't want to automatically delete old records in the provisioning archive, remove scheduled run from the [[devel:documentation:application_configuration:dev:scheduled_tasks:task-scheduler#deleteprovisioningarchivetaskexecutor|DeleteProvisioningArchiveTaskExecutor]]. If you don't want to automatically delete old records in the provisioning archive, remove scheduled run from the [[devel:documentation:application_configuration:dev:scheduled_tasks:task-scheduler#deleteprovisioningarchivetaskexecutor|DeleteProvisioningArchiveTaskExecutor]].
  • by apeterova