Introduction

Wiko Connector allows to create identities in the Wiko system using REST api.

Manager Issue

There is field superior which holds reference to user manager. To change it, the request has to contain username of superior. Our customer stores username in attribute and uses it this way. It works, but our normal configuration will not work as it will provision User-Id, not username. We will need to implement adjustment of username on-the-fly when we need it.

System Identity Types

There is Wiko User type.

Attribute	Description
`Name`	The username of the user
`Salutation`	Salutation (it can be different after provisioning depending on the language, so that the calculated attribute value is `Herr` but shows as `mr` from Wiko)
`Title`	Professional title
`FirstName`
`LastName`
`CustomerNumber`
`Active`
`Group`	Not supported
`Profile`	Not supported
`Identities`
`ActiveSince`
`ActiveUntil`
`StartTime`
`EndTime`
`LoginPassword`	User password. Used write-only.
`Superior`	Reference to user that is a superior. Please read note #Manager-Issue
`Birthday`
`Language`	User language - (it can be different after provisioning depending on the language, so that the calculated attribute value is '`Deutsch`' but when returned from Wiko it is `de`)
`Company`
`Bereich`
`Department`
`Team`
`JobTitle`
`EMailBusiness`
`AudienceManagement`	Not supported
`AudienceJob`	Not supported
`AudienceOther`	Not supported
`WorkPlace`
`CostCenter`
`CstmKreditor`
`CstmZusatzfunktion`
`Trainings`	Write-only. Please check IMS-6383 - Getting issue details... STATUS for details.
`Qualifications`	Write-only. Please check IMS-6383 - Getting issue details... STATUS for details.

System Resource Types

There is a System Resource Type but it is used only to create dummy resource that can be assigned to Core Identities to create Identities.

System Parameters

Parameter	Mandatory	Example	Description
`Wiko API Base Url`	✅	https://mdk.preview.ibtserver.de	The base url of the Wiko API endpoint
`Username`	✅	imex	Username used in authentication for API
`Password`	✅	password	Password used in authentication for API

Identity functions

The following identity functions are supported:

Function (task feature)	Supported
create/delete identities	✅
provisioning identities	✅
update identities	✅
provisioning identity updates	✅
deprovision identities	✅
cleanup of inactive identities active	-
check password changed active	-

Resources functions

The following resource functions are supported:

Function (task feature)	Supported
create/delete resources	-
provision resources	✅
update resources	-
provisioning resource changes	-
deprovisioning resources	-
provisioning resource allocations	-
deprovisioning resource allocations	✅
provisioning resources-resource allocations	-
Deprovisioning resource resource allocations	-

Cleanup functions

The following cleanup functions are supported:

Function (task feature)	Supported
In the should-actual Log available	-
Should be - Actually is - cleanup	-
Read back account properties	-
Resource identity member target system clean up	-
Resource resource member target system clean up	-