Provisioning
The Linux connector supports provisioning, allowing you to create and manage accounts and entitlements in Linux directly from SailPoint.
Prerequisite: Your system is configured for provisioning.
When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.
For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.
Important
This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.
Default Create Account Attributes
| Account Attribute | Description |
|---|---|
| username | Provided by the user when they log in. |
| uid | Each user must be assigned a user ID (UID). UID 0 (zero) is reserved for the root. UIDs 1-99 are reserved for other predefined accounts. Further, UIDs 100-999 are reserved by the system for administrative and system accounts. |
| home | The absolute path to the directory the user will be in when they log in. |
| pwdlastchg | Number of days since Jan 1, 1970 that password was last changed |
| pwdmin | The minimum number of days required between password changes. In other words, this is the number of days left before the user is allowed to change their password. |
| pwdmax | The maximum number of days the password is valid, after which the user is forced to change their password |
| pwdwarn | The number of days before a password is to expire that user is warned that their password must be changed |
| comment | General text field where you can provide a description |
| expiration | Days since Jan 1, 1970 that account is disabled. This is an absolute date specifying when the login may no longer be used. |
| inactive | The number of days after a password expires that account becomes disabled |
| lastlogin | Last login date and time of the account |
| primgrp | Name of the user's primary group |
| groups | Secondary groups of user |
| shell | User's shell |
| crthomedir | Connection to home directory |
| lastlog | The last login details |
| dupuid | The duplicate user ID |
| forcepwdchg | Specify if user has to be forced to change password on next login |
| password | This generator creates an initial password for the new account adhering to the password policy assigned to the associated Linux source in SailPoint. |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.