Schema Attributes

The application schema is used to configure the objects returned from connector. The following types of objects are supported:

  • Account object type is mapped to SCIM 2.0 server User resource.

  • Group object type is mapped to SCIM 2.0 server Group resource.

  • Entitlements object type is mapped to SCIM 2.0 server Entitlement resource.

  • Roles object type is mapped to SCIM 2.0 server Role resource.

Note

Discover Schema populates schema attribute values for supported object type.

The newly added extended schema attributes on SCIM 2.0 Server can be obtained into IdentityIQ schema by selecting the Discover Schema option of the respective objectType.

For example, to obtain the test extended attribute on a SCIM 2.0 Server into the IdentityIQ schema, select the account object type Discover Schema option.

After executing the Discover Schema operation, application adds only the new attribute mappings from the managed system which were not present in application.

To discover manager sub-attributes as separate attributes, splitManagerAttribute should be set as true in the application.

The connector supports aggregation of extended multiple Group objects. You can now extend additional group schema objects manually as shown in the following example:

<Schema aggregationType="group" nativeObjectType="Account" objectType="Account"/>