Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
tutorial:adm:czechidm_installation_finalize [2019/07/10 08:57]
doischert [Schedule the tasks]
tutorial:adm:czechidm_installation_finalize [2019/08/05 15:23]
apeterova provisioning of subordinates
Line 63: Line 63:
 idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter idm.sec.core.filter.IdmIdentity.managersFor.impl=guaranteeManagersFilter
 idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter idm.sec.core.filter.IdmIdentity.subordinatesFor.impl=guaranteeSubordinatesFilter
 +</code>
 +  
 +==== Configure subordinates provisioning ====
 +
 +Sometimes, we provision some details about the manager to the identity accounts. E.g. the attribute "manager" in Active Directory is the link to the user's manager. To make this link up-to-date, IdM does provisioning for new and original subordinates of the manager every time, when the manager's contract changes.
 +
 +If you don't need this functionality, which can be time consuming, switch it off like this:
 +
 +<code properties>
 +idm.sec.acc.processor.identity-contract-provisioning-processor.includeSubordinates=false
 +idm.sec.acc.processor.identity-contract-before-save-processor.includeSubordinates=false
 </code> </code>
      
  • by apeterova