Differences

This shows you the differences between two versions of the page.

--- tutorial:adm:virtual_system_-_adding_or_deleting_managed_extended_attributes [2019/06/05 13:09]
doischert
+++ tutorial:adm:virtual_system_-_adding_or_deleting_managed_extended_attributes [2019/06/12 06:37]
doischert [Deleting attributes on virtual systems]
@@ Line 1: / Line 1: @@
-====== Virtual system - adding extended attributes managed by CzechIdM ======
+====== Virtual system - adding (and deleting) extended attributes managed by CzechIdM ======
 {{tag> system virtual tutorial extended attributes}}
@@ Line 47: / Line 47: @@
 {{ :tutorial:adm:request_det.png?direct&1200 |}}
+===== Deleting attributes on virtual systems =====
+Some of the attributes may be superfluous in some cases, e. g., a system which only needs identity's first name and last name to create a login won't need to know user's phone number. Unless we remove those attributes, they will present an unnecessary administrative load since the implementer will be notified each time they change, even though they are not relevant for them.
+Removing these attributes is similar in process to creating them - basically, we have to retrace our steps and undo the changes we've made in steps 1, 2 and 3.
+If you want to stop provisioning an attribute which is present in other systems you have to do even fewer changes. This can be relevant in the above mentioned phone number case. In this case, undo only steps 2 and 3.
+First, remove the mapping of the attribute. Click Virtual systems, List, Mapping, and Provisioning. Check the checkbox next to the attribute you want to remove. Above the list, a new dialog should appear, Operation with selected record. Click and choose Remove. Click Yes.
+{{ :tutorial:adm:removemapping.png?direct&1200 |}}
+Then move to Scheme, click ACCOUNT. Check the checkbox next to the attribute you want to remove. Above the list, a new dialog should appear, Operation with selected record. Click and choose Remove. Click Yes.
+{{ :tutorial:adm:removescheme.png?direct&1200 |}}
+Then go to Configuration, find Attributes and delete the attribute you want to remove. Click Save.
+{{ :tutorial:adm:removeconfig.png?direct&1200 |}}
+Next, delete the attribute from the Form definitions of VsAccount. Click Form definitions in Settings, find the VsAccount item, check under Name that this is the virtual system from which you are removing the attribute. Open the item using the magnifying glass.
+{{ :tutorial:adm:virtual_form_definition.png?direct&1200 |}}
+Go to Form Attributes, check the box next to the attribute you want to remove and click on Operation with selected record, choose Remove and click Yes.
+{{ :tutorial:adm:screenshot_from_2019-06-12_08-35-22.png?direct&1200 |}}
+The attribute is still present in the detail of the user; however, it is no longer connected to the virtual system and the implementer will not be notified when the attribute's value changes.
+If you want to remove the attribute from the IdM entirely, you have to undo step 1 as well. Please note, however, that if any role has this attribute filled in (not empty), you will not be able to remove the attribute. Go to Settings, Configuration, Form definitions, Form Attributes. Check the checkbox next to the attribute you want to remove. Above the list, a new dialog should appear, Operation with selected record. Click and choose Remove. Click Yes.
+{{ :tutorial:adm:removedefinition.png?direct&1200 |}}