Provisioning Policy

When SailPoint provisions new accounts to the IBM Tivoli Directory Server connector, it uses the attributes on the Create Profile page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.

Important
This page describes the configuration of the default Create Profile. However, SailPoint recommends that you work with Services to define a Create Profile specific to your company's needs.

The following generators create required information for a new IBM Tivoli Directory Server account. You might need to edit the contents.

For more information on accounts, refer to Viewing Accounts on a Source.

Account Creation

The following table lists the provisioning policy attributes.

Account Attribute

Generator

Description

dn

Create Unique Account ID

This generator uses the value in the Pattern Used field to generate a unique DN for the new account.

Warning
You must change the OU for the Pattern Used field in the distinguishedName attribute.

password

Create Password

Password of the created user

CN

Create Unique LDAP Attribute

Full name of the user

For example:

  • Martin K Smith

  • Marty Smith

  • printer12

givenName

Identity Attribute

First name of the user to be created

SN

Identity Attribute

Last name of the user to be created