Application Reconfiguration Considerations

Take the following points into consideration before deciding to reconfigure an application.

Do the identity attribute of account and group in the original application match the identity attribute of account and group in the reconfigured application?

For example:

• Two application types (Delimited File and Active Directory – Direct) use distinguishedName as the identity attribute of account, and use the same identity attribute for group. Since both of these applications refer to the same identity attribute of both account and group, they would be good candidates for reconfiguration.

• Two application types (Oracle Application – FULL and Oracle Application – Direct) use different identity attributes for account, USER_ID in one and USER_NAME in the other and, USER_ID and USER_NAME differ in format. These are not good candidates for reconfiguration.

Note: If there are special attributes (native identity, managed attribute, entitlement) that split into multiple attributes in the new application type, reconfiguration is not recommended.

• Profiles in SAP–Full refer to both profiles and groups in the managed system, whereas in SAP–Direct, profile refers to profiles and group refers to the groups in the managed system. These are not good candidates for reconfiguration.