Extending Dynamic Connectors with Custom Managed Fields in Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Administrators may require additional attributes from a target endpoint not included in the default schema. This procedure outlines how to extend an existing Dynamic (DYN) connector to include a new managed field using Identity Manager Connector Xpress.

Environment

Identity Manager 14.5 & 15

Cause

Business requirements necessitate the mapping of additional native attributes to Identity Manager managed fields to support improved user provisioning and synchronization.

Resolution

Step 1: Update Project in Connector Xpress

1. Open CA IAM Connector Xpress.
2. Expand the Endpoint Types tree and select the relevant project (e.g., Salesforce).
3. Click Create Project in the top menu to initialize the synchronization.
4. Expand the User Attributes tree and select the Map Attributes tab.
5. Map the new managed field (e.g., "Service Cloud User") to the corresponding native attribute (e.g., UserPermissionsSupportUser).
6. Navigate to Account Screens > General Info and add the new field to the appropriate UI frame.
7. Save the project.

Step 2: Deploy and Rebuild

1. In the top menu, select Deploy Metadata and ensure the deployment completes successfully.
2. Navigate to IAM Suite\Identity Manager\tools\RoleDefinitionGenerator\bin.
3. Run RoleDefGenerator.bat for the specific endpoint type to generate the new .jar file.

Step 3: Deployment to Identity Manager

1. Back up the existing .jar file located in iam_im.ear\user_console.war\WEB-INF\lib\.
2. Replace the original file with the newly generated .jar file.
3. Restart the Identity Manager web application server.
4. Extract META-INF\[Endpoint]-RoleDef.xml from the new .jar file.
5. Open the Identity Manager Management Console, import the new RoleDef.xml file, and restart the Identity Manager Environment (IME).

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.