Properties that can be defined in xellerate.properties

  1. Add a ManagedResource definition in the ManagedResource list for an each OIM resource. For each resource, define a property prefix by adding a property whose name is the prefix and whose value is the OIM resource name.

    For example:

    AD=AD User

    Oracle=Oracle DB User

    This declares that any property that begins with ERP is related to the OIM resource named ERP Central Component.

  2. For each ManagedResource, define the account attribute that represents the unique account identifier. The names used here must be the resource names used by OIM. The identityAttribute must have the internal form field name containing the account identifier. Use the OIM Design Console application to find the process form for each resource and view the field names. The example below gives two typical names, one used by the connector for Oracle database users and the other for the Active Directory connector.

    AD.id=UD_ADUSER_UID

    Oracle.id=UD_DB_ORA_U_USERNAME

  3. Define the names of the child forms that support multiple attributes. The value is a CSV of the internal child form names:

    AD.childForms=UD_ADUSRC

    Oracle.childForms=UD_DB_ORA_R

    In this example UD_ADUSRC is the internal name for the child form AD User Group Details and UD_DB_ORA_R is the internal name for the child form DBUM Grant/Revoke Roles.

  4. Each child form name in the Oracle.childForms property there is another property whose value is a CSV of the child form fields to return and the order in which they will appear in IdentityIQ.

    Oracle.UD_DB_ORA_R=UD_DB_ORA_R_ROLE,UD_DB_ORA_R_ADMIN_OPTION

    In the previous example, the system returns two fields from the child form UD_DB_ORA_R. The first field has the Role name and the second has the Role Admin option.

  5. Following is the configuration for resource with child forms: ERP Central Component:

    Copy 
    ERP=ERP Central Component
    ERP.id=UD_ECC_USER_ID
    ERP.childForms=UD_ECC_PRO,UD_ECCRL
    ERP.UD_ECC_PRO=UD_ECC_PRO_SYSTEMNAME,UD_ECC_PRO_USERPROFILE
    ERP.UD_ECCRL=UD_ECCRL_SYSTEMNAME,UD_ECCRL_USERROLE

    Note
    Before IdentityIQ 6.0 there was a parameter in xellerate.properties file as oldChildFormNames which was used for the resources who have only one field in the childform, for example, Active Directory resource. For IdentityIQ version 6.0 onwards, the value must be set to true if the user wants to support oldChildFormNames where field returned would be form name + field name (For example, UD_ADUSRC:UD_ADUSRC_GROUPNAME field in Active directory).

  6. To aggregate all the active and disabled OIM users in IdentityIQ, add a new parameter OIM_USER_TYPE in xelerate.properties file with the value as ALL. If OIM_USER_TYPE parameter is deleted from the xelerate.properties file then only the active OIM users will be aggregated. By default only active OIM user are aggregated.