Create an Identity Collector

In Data Access Security, an Identity Collector is used for collecting accounts (users) and entitlements (groups) from a source. Currently, Data Access Security supports collecting accounts and entitlements from Active Directory and Azure Active Directory sources.

To create an identity collector, complete the following steps:

1. Navigate to Admin > Identity Collectors and click Create New.

General Details

1. From the Type dropdown, select the type of source.

2. In the Name field, provide a name for the identity collector.

   Note

   Identity Collectors cannot have the same name, even if they have different sources.

3. Select Next.

Connection Details

1. From the IDN Source dropdown, select the source the needs to be used for collecting users and groups.

   Note

   The source that was selected in the General Details steps will be the only source option that displays.

2. In the Properties to Fetch fields, you can manually add properties for users and groups which will be collected in addition to the default properties.

   Properties added in the Users Collection will be relevant to the collected users' data and the properties added in the Groups Collection will be relevant to the collected groups' data.

   Note

   Entered properties will be mapped in the following steps.

   

Users - Dynamic Fields Mapping

This step is optional.

Dynamic Fields Mapping allows renaming the fetched properties (default properties and manually added ones) by mapping them to a dictionary field.

Note

Only Users Data Dictionary fields can be used for mapping.

1. After mapping the properties, select Next.

Groups - Dynamic Fields Mapping

This step is optional.

Dynamic Fields Mapping allows renaming the fetched properties (default properties and manually added ones) by mapping them to a dictionary field.

Note

Only Groups Data Dictionary fields can be used for mapping.

1. After mapping the properties, select Next.