Field-mapping for login-id to IDM user-console

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

How do I change the field-mapping (IDM to user-store) for Loginid in IDM for a particular IME. Example, currently users can login using their uid attribute of user-store. Now, I want to change it to employeeNumber (any attribute that is unique at the directory-level).

Environment

Release:
Component: IDMGR

Resolution

Before following the steps below please do this on your test environment first as this would change all of the users logins suddenly!

Login to the management console.

Management Console>Directories>Userstore/  You will find %user_id%.  Under management objects click "user".  Under attributes find UID.  The well known name will be     
%USER_ID%

export the userstore.xml.  Change the managementobjectattr for uid.  Search for uid.  It will look like this:

<ImsManagedObjectAttr physicalname="uid" description="User ID" displayname="User ID" valuetype="String" required="true" wellknown="%USER_ID%" maxlength="0" permission="WRITEONCE" validationruleset="User ID Validation

You will change this to use your attribute.  In this case we used employeenumber.

lmsManagedObjectAttr physicalname="uid" to ImsManagedObjectAttr physicalname="employeeNumber"

Import.