Description

This tutorial covers the "Out Of The Box" reconciliation features of Identity Manager. After configuring reconciliation, for a given resource, the process will discover and link "matching" users in the Resource to users in Identity Manager.

Top

Learning Objectives

After completing this tutorial, the following topics should be understood.

Understand reconciliation
Setup reconciliation
Run reconciliation

Top

Prerequisites

The following items must be completed before starting this tutorial.

Complete the Identity Manager Configuration Tutorial

Top

Setup

The following steps need to performed to enable the demonstration.

Section 1: Configure Reconcilation

Access the Admin Interface `http://localhost:8080/idm` and log in as: configurator / configurator Select the Resources tab Select the List Resources sub-tab Expand the Simulated Folder Check the Box in front of the Timecard Resource Click the -- Resource Action -- Drop Down List Select the Edit Reconciliation Policy item
In the Situation Options section: Click on the UNASSIGNED Drop Down List and select the Link resource account to user item Click the Save Button (bottom of the page)

Top

Demonstration

After completing the setup above, the following sections should be performed to complete this tutorial.

The following users are in the Timecard Resource:

name	First	Last	Email	In IdMgr
bhope	Bob	Hope	bob.hope@example.com	No
bobama	Barack	Obama	barack.obama@example.com	Yes
dmartin	Dean	Martin	dean.martin@example.com	No
hsimpson	Homer	Simpson	homer.simpson@example.com	No
jbauer	Jack	Bauer	jack.bauer@example.com	No
jbiden	Joe	Biden	joe.biden@example.com	Yes
jmccain	John	McCain	john.mccain@example.com	Yes
jwayne	John	Wayne	john.wayne@example.com	No
spalin	Sarah	Palin	sarah.palin@example.com	Yes
thanks	Tom	Hanks	tom.hanks@example.com	No

After Reconciliation, the four accounts (already in Identity Manager) will be linked to the Timecard Resource

Section 1: Before Reconciliation

Verify that the users do not have any Resources assigned to them.

Access the Admin Interface `http://localhost:8080/idm` and log in as: configurator / configurator Select the Accounts tab Select the Find Users sub-tab Uncheck the Name item (if it's checked) Check the User's Organization item is in item Top item Click Search
Notice that our users do not have any Resources

Section 2: Run Reconciliation

Access the Admin Interface `http://localhost:8080/idm` and log in as: configurator / configurator Select the Resources tab Select the List Resources sub-tab Expand the Simulated Folder Check the Box in front of the Timecard Resource Click the -- Resource Action -- Drop Down List Select the Full Reconcile Now item
Select the Resources tab Select the List Resources sub-tab Expand the Simulated Folder Check the Box in front of the Timecard Resource Click the -- Resource Action -- Drop Down List Select the View Reconcile Status item
Review the results of the Reconciliation: Resource Accounts Discovered Create new used based on the account discovered Review the Situation Analysis : Click the CONFIRMED link
Review the accounts that got created

Section 3: After Reconciliation

Validate the created users: Select the Accounts tab Select the Find Users sub-tab Uncheck the Name item (if it's checked) Check User has TImecard item Click Search
Notice that the Users have the Timecard Resource