ADSAccount to Person fields

Question

Sirs 
 When I do a import from AD to IDM via sync connector, i select search and create, the AD account information can be created under ADSAccount table and it also create the corresponding record in Person table. But how can i let the AD account attributes value imported to Person record field such as employeeid? From where at IDM i can control which attributes from ADSaccount can be updated to Person record. 
 
 Thanks 
 Gary

Barry Jackson · Answer

Hi Gary, 
 The attributes mapped/copied from ADSAccount to Person can be found in the overridable script ADS_PersonAuto_Mapping_ADSAccount. 
 HTH, Barry.

Barry Jackson · Answer

Hi Gary, 
 The script is 'Overridable' so you have to make a copy of the script and externally give it a new name (starting CCC typically) and change it from 'Overridable' to 'Overrides'. 
 Then you can edit your new script. Anywhere the old script is called from will now call your version that 'Overrides' the standard. 
 HTH, Barry.

Barry Jackson · Answer

Hi Gary, 
 Not sure where this went wrong ..... the internal name of the script must remain the same ...... so the start of the script should be: 
 Public Overrides ADS_PersonUpdate_ADSAccount(........) 
 Only the external name of the script should change to CCC (the top field called 'Script' in Designer. 
 But ...... that script is used when an ADSAccount is updated and you want the changes propagated to Person. 
 I thought you wanted to intervene when the Person account is created from the ADSAccount ...... in which case you want to override ADS_PersonAuto_Mapping_ADSAccount. 
 HTH, Barry.

Barry Jackson · Answer

Hi Gary, 
 Then indeed you will need to override both scripts and ensure that the same data is inserted by the ADS_PersonAuto_Mapping_ADSAccount script as that which is updated by the ADS_PersonUpdate_ADSAccount script. You will need to enable the config parm 'TargetSystem\ADS\PersonUpdate' (but you knew that). 
 Be aware that these changes will apply to ALL the AD domains that you have ..... if you want to only do it for say 1 domain out of 5 then you will need to code in some if statements targeting the UID of the domain. Unfortunately this cannot be controlled at the domain level by config parms. 
 HTH, B.

ADSAccount to Person fields

Top Replies