...
Introducation
There are various task features related to the system connectors that can be either enabled or disabled.
Identity features
The following identity functions features are supported:
Function (task feature)
Description
create/delete resources
Create or delete a managed resource in the CoreOne Suite
provision resources
Provisioning a managed resource in the target system
update resources
Update managed resource in the CoreOne Suite
provisioning resource changes
Provisioning changes to managed resources in the target system
deprovisioning resources
Deprovision managed resources in the target system
provisioning resource allocations
Provisioning resource allocations in the target system (linked resources)
deprovisioning resource allocations
Deprovision resource allocations in the target system (linked resources)
provisioning resources-resource allocations
Function (Task feature)Name | Description | ||
createCreate / delete identities | Create/delete identities in the CoreOne Suite. Attributes must be checked for uniqueness (locally, i.e. in the COS and in the real target system) | provisioning identities | provision identities in If enabled, identities for that target system will be calculated and created within the CoreOne Suite. |
Provisioning identities | If enabled, identites will be provisioned to the target system. | ||
update identities | Updating identities and the associated attributes in Update identities | If enabled, identites will be updated within the CoreOne Suite. | |
provisioning Provisioning identity updates | Provisioning If enabled, calculated changes to identities and the associated attributes in will be provisioned to the target system. | ||
deprovision Deprovision identities | Deprovision identities If enabled, identities will be deprovisioned in the target system cleanup if their life cycle has ended. | ||
Cleanup of inactive identities active | Perform a cleanup process to remove or deactivate identities that are no longer active in the system. | ||
check password changed active | Check if the password change has been successfully applied and is currently active. |
Resources functions
The following resource functions are supported:
Deactivates identities that did not login to the system after a certain time period. The period is configurable on the task definition. Defaults to 60 days. | |
Check password changed active | Deactivates identities that did not change their password after the creation of the account within a certain time period. The period is configurable on the task definition. Defaults to 24 hours. |
Resources features
The following resource features are supported:
Name | Description |
Create/delete resources | If enabled, managed resources for that target system will be calculated and created within the CoreOne Suite. |
Provision resources | If enabled, managed resources will be provisioned to the target system. |
Update resources | If enabled, managed resources will be updated within the CoreOne Suite. |
Provisioning resource changes | If enabled, calculated changes to managed resources will be provisioned to the target system. |
Deprovisioning resources | If enabled, managed resources will be deprovisioned in the target system if their life cycle has ended. |
Provisioning resource allocations | If enabled, resource allocations will be provisioned in the target system |
Deprovisioning resource allocations | If enabled, resource allocations will be deprovisioned in the target system |
Provisioning resources-resource allocations | If enabled, resource to resource allocations will be provisioned in the target system |
Deprovisioning resource resource allocations | Deprovision resource assignments If enabled, resource to resource allocations will be deprovisioned in the target system |
Deactivate deprovision prevention for prolonged resource assignments |
...
If enabled, deactivates the deprovision prevention for resource assignments that could be deprovisioned unintentionally. If this feature is deactivated, the resource assignment are protected from deprovisioning too early if there are other, valid resource assignments for the same resource. This feature is a preview flag for an improvement. It will be removed in a future version. In general, this feature should not be enabled. |
Cleanup features
The following cleanup functions features are supported:
Function (task feature)Name | Description |
In the should-actual Log available | Log is available that tracks the expected values versus the actual results, allowing for comparison and review. |
Should be - Actually is - cleanup | Compare the expected values with the actual state and ensure necessary cleanup actions are performed to maintain system consistency. |
Read back account properties | Retrieve and verify the properties of the account to ensure they are accurately reflected in the system. |
Resource identity member target system clean up | Ensure that the resource identity member information is properly cleaned up on the target system to avoid discrepancies |
Resource resource member target system clean up | Perform the necessary cleanup of resource memberships within the target system to maintain data integrity. |