Description: Demonstrates how to manipulate reconciliation event data when running user reconciliation scheduled job for most Identity Connector Framework (ICF) connectors (Refer to the connector's documentation for specific instructions). The example given here uses the OID 11.1.1.6.0 connector (ODSEE/OUD/LDAPV3, Target System = OpenLDAP).
References: https://docs.oracle.com/cd/E22999_01/index.htm
https://docs.oracle.com/cd/E22999_01/doc.111/e28603/extnd_func.htm#BGBBBCGE
1. Create a Java class that contains the transformation logic for the reconciliation field. The transformation logic must be placed under "public Object transform(HashMap parentData, HashMap childData, String sField)" method. Given below is example.
2. Create a JAR file with the class and upload JAR file to Oracle Identity Manager as a Java Tasks type. Refer to OIM Upload Jar Utility for instructions.
JAR file Upload Verification |
3. Create a new lookup definition (E.g. Lookup.RESOURCE_HERE.UM.ReconTransformation) which contains associations between the reconciliation field being transformed and the fully qualified Java class name that has the transformation logic.
Code Key = The name of the reconciliation field being transformed. This value is passed in as the third parameter in the transform() method.
Decode = The fully qualified Java class name that contains the logic to transform the reconciliation field specified in the Code Key.
LDAP Example: Lookup.LDAP.UM.ReconTransformation Code Key = Title Decode = com.blogspot.oraclestack.transformation.OpenLDAPReconciliationEventDataTransformer |
4. Modify the UM Configuration lookup definition for your particular resource (Lookup.RESOURCE_HERE.UM.Configuration) and add an entry for the transformation lookup.
Code Key = Recon Transformation Lookup
Decode = Name of your transformation lookup definition
LDAP Example: Lookup.LDAP.UM.Configuration Code Key = Recon Transformation Lookup Decode = Lookup.LDAP.UM.ReconTransformation |
5. Verify transformation field by running reconciliation scheduled job and inspecting the reconciliation event.
Target User Data in OpenLDAP |
LDAP User Reconciliation Scheduled Job |
Reconciliation Event with Title field transformed |
Custom Logs |
Thanks for sharing this example.
ReplyDeleteDo you know if it's correct for trusted reconciliation too?
thanks for sharing
ReplyDelete