Schema Attributes
The application schema is used to configure the objects returned from connector. The following types of objects are supported:
-
Account object type is mapped to SCIM 2.0 server User resource.
-
Group object type is mapped to SCIM 2.0 server Group resource.
-
Entitlements object type is mapped to SCIM 2.0 server Entitlement resource.
-
Roles object type is mapped to SCIM 2.0 server Role resource.
Note
Discover Schema populates schema attribute values for supported object type.
The newly added extended schema attributes on SCIM 2.0 Server can be obtained into IdentityIQ schema by selecting the Discover Schema option of the respective objectType.
For example, to obtain the test
extended attribute on a SCIM 2.0 Server into the IdentityIQ schema, select the account object type Discover Schema option.
After executing the Discover Schema operation, application adds only the new attribute mappings from the managed system which were not present in application.
To discover manager sub-attributes as separate attributes, splitManagerAttribute
should be set as true
in the application.
The connector supports aggregation of extended multiple Group objects. You can now extend additional group schema objects manually as shown in the following example:
<Schema aggregationType="group" nativeObjectType="Account" objectType="Account"/>