Correlation rule to match accountID of IDM with EmployeeID of AD
Hi,
I have created a Correlation rule to match accountID of IDM with EmployeeID of AD as follows:
<cond>
<ref>account.accountId</ref>
<list>
<new class='com.waveset.object.AttributeCondition'>
<s>employeeID</s>
<s>equals</s>
<ref>account.accountId</ref>
</new>
</list>
</cond>
The AD resource is not getting assigned, would appreciate for any kind of help.
Thanks
[535 byte] By [
rsdthfstha] at [2007-11-26 13:40:00]

# 1
Did you block trace the rule? That should show you what is going wrong. I suspect that you may need to try something like this:
<new class='com.waveset.object.AttributeCondition'>
<s>name</s>
<s>equals</s>
<ref>employeeID</ref>
</new>
Bev.
# 2
Hi Bev,
Thanks for the response.
As mentioned by you <ref>EmployeeID</ref> gives me null.
In my case, accountID of the IDM is mapped to sAMAccountName of AD attribute and Employee ID is mapped to employeeID of AD attribute.
Can you now help me to proceed further.
Thanks,
# 3
Try this:
<new class='com.waveset.object.AttributeCondition'>
<s>name</s>
<s>equals</s>
<ref>account.EmployeeID</ref>
</new>
Where name
will be the IdM AccountId and <ref>account.EmployeeID<ref>
will the EmployeeID schema attribute defined on the resource that you're reconciliing, i.e. AD.
HTH,
Paul
# 4
Hi Paul,
Thanks a ton for the response.
By saying account.EmployeeID, do you mean that EmployeeID is the one which is on the left hand side of the mapped attribute in IDM? since according to the deployment doc it says we should always have account.<LHS> attribute.
Below is the complete code, I am still trying out..
<block trace='true'>
<cond>
<ref>account.accountId</ref>
<list>
<new class='com.waveset.object.AttributeCondition'>
<s>name</s>
<s>equals</s>
<ref>account.EmployeeID</ref>
</new>
</list>
</cond>
</block>
Thanks
# 6
Hi paul,It is working fine. Thanks alot.Was getting an error saying the account is locked by configurator, soon after I deleted the task which was updating the user, it started working fine.Thanks once again
# 7
Hi there,
Yes it's the left hand side (LHS) of the schema map that is referred to, regarding your other question the 'name' is the name of the Identity Manager account, i.e. the accountId, I was confused a tad the first time I saw this as well, thinking that name was the surname or givenname for the account but in fact it's the accountId.
Glad to see you got it working.
Cheers,
Paul Walker, Sun.