Provisioning Policy
When SailPoint provisions new accounts to the IBM Tivoli Directory Server connector, it uses the attributes on the Create Profile page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
Note
During creation of an account, ensure that the value of Full Name must be the same as the value of CN in the dn attribute.
For example, if the value of dn is CN=Jeff Smith,OU=Sales,DC=Fabrikam,DC=COM then the value of Full Name must be Jeff Smith.
Account Creation
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
dn |
Distinguished name of the user to be created |
|
password |
Password of the created user |
|
CN |
Full name of the user For example:
|
|
givenName |
First name of the user to be created |
|
SN |
Last name of the user to be created |
Create Group (groupOfUniqueNames)
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
dn |
Distinguished name of the user to be created |
|
uniquemember |
The distinguished name for the member of a group |
|
description |
Description of the group to be created |
Update group (groupOfUniqueNames)
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
description |
Description of the group to be created |
Create posixgroup
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
dn |
Distinguished name of the user to be created |
|
gidNumber |
Contains an integer value that uniquely identifies a group in an administrative domain |
|
description |
Description of the group to be created |
Update posixgroup
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
description |
Description of the group to be created |
Create nisNetgroup
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
dn |
Distinguished name of the user to be created |
|
description |
Description of the group to be created |
Update nisNetgroup
The following table lists the provisioning policy attributes.
|
Account Attribute |
Description |
|
description |
Description of the group to be created |