Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Last revision Both sides next revision
tutorial:adm:synchronization [2018/11/15 11:24]
svandav [Specific synchronization options]
tutorial:adm:synchronization [2022/03/28 11:13]
doischert
Line 31: Line 31:
     * **Remove link and appropriate roles**: This removes the links, as in the previous case. In case of CzechIdM identity it also removes roles that are linked with this account.     * **Remove link and appropriate roles**: This removes the links, as in the previous case. In case of CzechIdM identity it also removes roles that are linked with this account.
     * **Ignore**: This action does not perform any active operation.     * **Ignore**: This action does not perform any active operation.
 +    * **Ignore and do not log**: This action does not perform any active operation. Additionally, it does not create a log entry in the synchronization log.
   * **Not Linked** - This is a situation when there is no link between the entity in CzechIdM and object in connected system. Since the link does not exist yet, the identity has been found using a **correlation attribute**. The following actions can be performed in Not Linked situation:   * **Not Linked** - This is a situation when there is no link between the entity in CzechIdM and object in connected system. Since the link does not exist yet, the identity has been found using a **correlation attribute**. The following actions can be performed in Not Linked situation:
     * **Create link**: This creates a link between CzechIdM entity and object. Editing of the identity itself is not done, provisioning is not called.     * **Create link**: This creates a link between CzechIdM entity and object. Editing of the identity itself is not done, provisioning is not called.
Line 36: Line 37:
     * **Create link and update account**: A link is created in the same way as in the previous case. In addition, the account on the end system is updated - an event for running provisioning is called.     * **Create link and update account**: A link is created in the same way as in the previous case. In addition, the account on the end system is updated - an event for running provisioning is called.
     * **Ignore**: This action does not perform any active operation.     * **Ignore**: This action does not perform any active operation.
 +    * **Ignore and do not log**: This action does not perform any active operation. Additionally, it does not create a log entry in the synchronization log.
   * **Missing Entity** - This is a situation when there is no entity in CzechIdM matching object in the connected system. The following actions can be performed in this situation:   * **Missing Entity** - This is a situation when there is no entity in CzechIdM matching object in the connected system. The following actions can be performed in this situation:
     * **Create entity**: creates an entity in CzechIdM and a link it to object in connected system. The creation is done based on the attribute mapping chosen in synchronization configuration. The creation of entity calls provisioning.     * **Create entity**: creates an entity in CzechIdM and a link it to object in connected system. The creation is done based on the attribute mapping chosen in synchronization configuration. The creation of entity calls provisioning.
     * **Ignore**: This action does not perform any active operation.     * **Ignore**: This action does not perform any active operation.
 +    * **Ignore and do not log**: This action does not perform any active operation. Additionally, it does not create a log entry in the synchronization log.
   * **Missing Account** - This is a situation when there is no object on the end system matching the entity in CzechIdM. The following actions can be performed in this situation:   * **Missing Account** - This is a situation when there is no object on the end system matching the entity in CzechIdM. The following actions can be performed in this situation:
     * **Create account**: Synchronization calls entity provisioning, which leads to creation of an object on the connected system.     * **Create account**: Synchronization calls entity provisioning, which leads to creation of an object on the connected system.
Line 45: Line 48:
     * **Remove link and appropriate roles**: This removes the links, as in the previous case, however, it also removes the linked identity roles. In other words, it removes the roles which were assigned to the identity by the account.     * **Remove link and appropriate roles**: This removes the links, as in the previous case, however, it also removes the linked identity roles. In other words, it removes the roles which were assigned to the identity by the account.
     * **Ignore**: This action does not perform any active operation.     * **Ignore**: This action does not perform any active operation.
 +    * **Ignore and do not log**: This action does not perform any active operation. Additionally, it does not create a log entry in the synchronization log.
  
 ==== Specific synchronization options ==== ==== Specific synchronization options ====
  • by stekld