Schema Reference
The application schema is used to configure the objects returned from a connector.
Note
-
The Account Schema tab is used to define the attributes for each object type in the application being configured. The schema attributes can be defined as Entitlement or Multi-Valued. Refer to Managing Source Account Schemas for more information.
-
The schema attributes that are not present by default must be defined as strings if not specified.
The Top Secret connector uses the following default correlation and object configurations.
Default Account Schema
Each source supports a variety of details, or attributes, about each user who has an account, such as their name, email address, manager name, and location.
The set of account attributes each source stores and how they're organized is known as the account's schema. To best represent your data, you can configure sources to use an account schema matching the one you use in the external connector. Refer to Managing Source Account Schemas for more information.
Default Account ID
SailPoint requires that certain attributes remain in your configuration. These attributes are referred to as account IDs.
Caution
Changing the attribute marked as the account ID after aggregating accounts can result in duplicate accounts being created. To avoid this, either reset the accounts on this source before editing the account ID attribute or edit the account ID attribute before aggregating accounts.
To resolve issues caused by changing account IDs, reconfigure them to their default values.
The following table lists the default account IDs for this connector:
| Account ID | Schema Object Type |
|---|---|
| USER_ID | Account |
| GROUP_ID | Group |
Default Account Attributes
The Top Secret connector supports the following default account schema attributes and customer configurable attributes. The attributes must be defined as strings if not specified.
The following lists the account attributes:
| Attribute Name | Description |
|---|---|
| USER_ID | Unique ID of the user |
| USER_OE_PR | Defines the initial directory path |
| groups | List of groups this user belongs to |
| LAST_USED_DATE | Date the user last logged on |
| USER_TYPE | ACID type (MSCA, LSCA, SCA, ZCA, VCA, MCA, USER) |
| NAME | Name of ACID |
| EXPIRES | Expiration date of ACID |
| RESUMES | Date when suspension ends |
| INFO.SUSPEND_TYPE | Suspend type (ASUSPEND, PSUSPEND, VSUSPEND, XSUSPEND) |
| INSTDATA | Installation data of ACID |
| OPIDENT | CICS operator identification value equal to the ACID OPIDENT entry in the CICS SNT (Signon Table) |
| OPPRTY | CICS operator priority of associated ACID |
| SITRAN | CICS transaction CA Top Secret automatically executes after an ACID successfully signs on to a facility |
| TSOCOMMAND | Default command issued at TSO logon |
| TSODEST | Default destination identifier for TSO generated JCL for TSO users |
| TSOHCLASS | Default hold class for TSO-generated JCL for TSO users |
| TSOJCLASS | Job class for TSO generated job cards from TSO users |
| TSOLACCT | TSO Default account number |
| TSOLPROC | Default procedure used for TSO logon |
| UID | Numeric UID value for security within USS |
| DFLTGRP | Default group to an ACID operating under OpenEdition MVS |
| HOME | Subdirectory of ACID under OMVS |
| ADMIN.ACID | Authority levels at which ACID can manage ACIDs within scope |
| ADMIN.DATA | Authority to list Security File information |
| ZONE_NAME | Zone name |
| ZONE_ACID | Zone ACID |
| DIV_NAME | Division name |
| DIV_ACID | Division ACID |
| DEPT_NAME | Department name |
| DEPT_ACID | Department ACID |
| ParentContainerName | Parent Container Name |
| ParentContainerType | Parent Container Type |
| ParentContainerACID | Parent Container ACID |
Default Group Attributes
The Top Secret connector also supports groups. The following attributes must be configured on the managed system and in the SailPoint source schema to manage groups.
The following lists the group attributes:
| Attribute Name | Description |
|---|---|
| GROUP_ID | Unique ID of the group |
| GROUP_OE_PR | Parent container of ACID |
| NAME | ACID name |
| UG_TYPE | ACID type (MSCA, LSCA, SCA, ZCA, VCA, MCA, USER) |
| GID | Group identification for OMVS |
| ZONE_NAME | The group's zone name |
| ZONE_ACID | The group's zone ACID |
| DIV_NAME | The group's division name |
| DIV_ACID | The group's division ACID |
| DEPT_NAME | The group's department name |
| DEPT_ACID | The group's department ACID |
| ParentContainerName | The group's parent container name |
| ParentContainerType | The group's parent container type |
| ParentContainerACID | The group's parent container ACID |
| INSTDATA | Installation data of ACID |
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.