Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Minor

...

For example, data export is used when activating or deactivating cards to update the access rights in the physical access control system (PACS).

Prerequisites

Expand
titlePrerequisites

Before setting up a connection to the external JDBC database, LDAP directory, or SCIM server, make sure that the following things apply:

  • Connection information to the external JDBC database, LDAP directory, or SCIM server must be known.
  • To test the connection or use it during process execution, the JDBC database, LDAP directory, or SCIM server must be available and you must have the rights to access the service and make updates in it.

For SCIM server export:

  • Identity Manager provides implementations for the standardized SCIM resources User and Group. To export to another resource, it must be implemented on the client side as a new class implementing ISCIMResource.

...

Expand
titleSet properties for SCIM export

In the properties tab, configure the connection to the SCIM server that defines the target of the export. All properties may use JUEL expressions that are resolved using the process data map like the values of the mappings. The SCIM server export can both insert new and update existing resources.

  1. Go to Properties.
  2. In Connection String, insert the URL that should be used to establish a SCIM connection to the SCIM server. The URL must contain a port number, for example ‘18444’.
  3. In Resource, insert the endpoint of the resource type you want to export or choose one from the drop down list.
  4. To enable transport layer security, and if https is selected as protocol, upload a Server certificate (X.509). It is mandatory to be able to test the connection or save the data source. Using an encrypted protocol is useful not only to encrypt the content of HTTP requests, but also the URL, which typically already holds information, that may be private and confidential.

    When the server certificate is uploaded, its identifier is displayed.
  5. If the service requires client authentication, upload a Client Certificate (a PKCS#12 software token), and enter the Client Certificate Password.
    The encrypted password is stored in the SecretFieldStore within Identity Manager. However, if a data pool configuration with such a password is exported, the exported configuration file will contain the unencrypted password. It will be encrypted again, when imported into another Identity Manager instance.
  6. Click Test Configuration to test if a connection can be established to the SCIM server, using the property Connection string. If the test succeeds, a green icon is displayed at the right-hand side and the drop-down list Resource will be filled with the supported resource types. Otherwise, a red icon will appear.

...

Additional information

Expand
titleUseful links