Moving account to different ou in LDAP,AD by IDM

Hi, all

I have problem to ask everyone again.. Coz I'm very newbie in IDM.

Now my project is neary finish but it's still has problem that i can't solve.

I had reconcile user from Sybase in to IDM and Provision all account to LDAP and AD using single workflow form.. It's work

the problem is after this..

I have to enable ActiveSync with Sybase that polling to check the std_status of all user in Sybase ( all are students )

when student is graduate the std_status is change from 'S' --> 'G'

My objective is move account in IDM LDAP and AD from StudentOU to AlumniOU..

My colleague suggest that I can only one ActiveSync form to do this

but I try and can't make it work.

My code is look like this.. ( ActiveSync enable on Sybase )

<defvar name='status'>

<switch>

<trim><ref>activeSync.stdstatus</ref></trim>

<case>

<s>G</s>

<s>Alumni</s>

</case>

<case>

<s>S</s>

<s>Student</s>

</case>

</switch>

</defvar>

<Field name='update_fields'>

<Field name='waveset.organization'>

<Expansion>

<cond>

<eq>

<ref>status</ref>

<s>Alumni</s>

</eq>

<s>Top:Alumni</s>

<s>Top:Student</s>

</cond>

</Expansion>

</Field>

<Field name='accounts[LDAP].identity'>

<Expansion>

<concat>

<s>uid=</s>

<trim><ref>activeSync.accountId</ref></trim>

<cond>

<eq>

<ref>status</ref>

<s>Allumni</s>

</eq>

<s>,ou=Alumni,dc=ibO,dc=com</s>

<s>,ou=Student,dc=ibO,dc=com</s>

</cond>

</concat>

</Expansion>

</Field>

<Field name='accounts[AD].identity'>

<Expansion>

<concat>

<s>cn=</s>

<trim><ref>activeSync.accountId</ref></trim>

<cond>

<eq>

<ref>status</ref>

<s>Allumni</s>

</eq>

<s>,ou=Alumni,dc=ibO,dc=com</s>

<s>,ou=Student,dc=ibO,dc=com</s>

</cond>

</concat>

</Expansion>

</Field>

</Field>

This form effect only account in IDM but in LDAP and AD it's doesn't affect anything.

I understand that changing account identity in IDM isn't enough to change ou in LDAP and AD but I don't know how to do this better..

Does anyone have suggestion ?

Do I have to perform this by using Workflow ? I don't have any experience in coding workflow. Plz give me some example and how to config IDM to use that workflow..

Thx for every attentions..

I'm waiting for ur valuable suggestion.

[3149 byte] By [ibOa] at [2007-11-27 9:53:29]
# 1

Hi,

the form alone will only help you with IDM just like you experienced. The reason is that in LDAP and AD what you are trying to do is not an update but a rename in IDMs terminology.

So what you have to do is:

Find out that the user has to move and move him in IDM in the form. Put a field in your form like issueRename and set it to true.

Clone your updateUser workflow and add a new activity issueRename. In the provisioning activity insert a new transition to issueRename if user.issueRename equals true.

The new activity checks out a rename view modifies it and checks it back in to then continue where the provisioning activity would have gone if you had not inserted the rename step.

To figure out how to manipulate the view to reach your goal use the bpe on a user with AD and LDAP and check out his rename view. Modify it, save it and check if it worked. When you got it working do the same what you did in bpe interactivly with a script action between renameView checkout and checkin.

Regards,

Patrick

Patrick.Wehingera at 2007-7-13 0:22:44 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

Thx for ur advices, Patrick

I do get ur idea and i'm try to process this by workflow..

but I still have some question about ur suggests..

" To figure out how to manipulate the view to reach your goal use the bpe on a user with AD and LDAP and check out his rename view. Modify it, save it and check if it worked. When you got it working do the same what you did in bpe interactivly with a script action between renameView checkout and checkin. "

for this paragraph.

How can I modify rename view.. and How to create script action between renameView checkout and checkin..

plz give me Some clearly example.

Thx very much.

ibOa at 2007-7-13 0:22:44 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3
I just read doc ( Identity Manager 7.0 Workflows,Forms, and Views ) and I found that for my case I have to use renameview.It's has little code in doc.. But I still don't get and idea..Where I have to put that kind of code in..?Hope Someone help me..Thx all
ibOa at 2007-7-13 0:22:44 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4
....
ibOa at 2007-7-13 0:22:44 > top of Java-index,Web & Directory Servers,Directory Servers...