While creating eDir connector, you have the option to import connections from any IDM driver sets configured on the eDir server. This button will not work until you have a good connection with the eDir server. Once the connection is successful, click the (name the button) to import all connection information from all driver sets configured on the server. You cannot import passwords and delete any unwanted connections created by this feature.
The DN of the bind user should be in LDAP format. cn=admin, ou=sa, o=system
NOTE:If you switch from clear text to SSL via the check box, then change the Port to 636.
For more information about Actions, see LDAP Based Connectors.
Path syntax attributes are accessed using the Association/Entitlement/Path actions. The following explanation is provided to help you to understand the syntax. DirXML-Associations, DirXML-EntitlementRef are both Path syntax.
NOTE:For Roles and Resources, use the UserApp Connector.
Path syntax has three components, and in this, the connector are exposed in LDAP format of volume#nameSpace#path
DN value in LDAP syntax like cn=DriverName,cn=DriverSet,ou=OrgUnit,o=Org
32 bit integer (usually 0-4 for DirXML-Associations or 0-1 for DirXML-EntitlementRef)
A case insensitive string (Possible DirXML-Association values, DirXML-EntitlementRef will be an XML nodeset of varying content).
Use an Assert attribute value that contains the following:
cn=EntitlementName,cn=DriverName,cn=DriverSet,ou=OrgUnit,o=Org#1#
Use the regex enabled Assert Attribute Value that contains:
cn=DriverName,cn=DriverSet,ou=OrgUnit,o=Org#[0-9].#.+
NOTE:Where [0-9] means 1 to many instances of a number for 0 to 9.
We do not have an Entitlement action yet, but you can still do it by adding the correct attributes.If you want to tweak this for your specific entitlement the steps are as follows:Make sure DirXML-EntitlementRecipient is added as an objectClass.To check for an entitlement grant/revoke check the attribute “DirXML-EntitlementRef” for the appropriate value.
DirXML-EntitlementRef attribute equals: "cn=TestEntitlement,cn=Loopback Driver,cn=driverset1,o=system#1#<ref><src>RBE</src><id>system\driverset1\Entitlement Policies\Test</id><param>TestValue</param></ref>"
DirXML-EntitlementRef attribute equals:cn=TestEntitlement,cn=Loopback Driver,cn=driverset1,o=system#0#<ref><src>RBE</src><id>system\driverset1\Entitlement Policies\Test</id><param>TestValue</param></ref>
After running the command, check for entitlements such as: work flow, adding role, and so on.
NOTE:If you want Identity Validator 2.0 to artificially add an entitlement you do it the same way by adding an attribute with the specific value. This is same as revoke or add.
If you attempt to access an attribute that is not available for the object, you will receive Object Class Violation (-628) error.
Do not forget to specify the object class for the object during creation, and any auxiliary classes as needed modifications.
This could occur if you have a single valued attribute and you are trying to add a second value.