Reporting Global Users Absent from Identity Manager Corporate Directory

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article outlines the procedure to identify Global Users residing in the Provisioning Store that are not registered within the Identity Manager (IDM) corporate directory. By tagging corporate users and performing a query against the provisioning directory, administrators can isolate synchronization gaps.

Environment

Identity Manager 14.x

Resolution

Set a custom field of corporate global users belonging to IM then search in provisioning store those which are not marked.

1. Map Custom Attributes: In the Provisioning Advanced Settings (Management Console), map a custom user attribute in the Corporate Directory to a user attribute in the provisioning directory (e.g., map IMUsrCustom11 to eTCustomField11).

2. Create Bulk Task: In the User Console, create a Bulk Task Definition for the "User" Object Type and the "Modify User" Task. Set the custom attribute to "IM" for the target population (set the Object filter to (all)). Execute the task.

3. Execute Extraction Script: Run the following command script on the Provisioning Server to isolate users present in the provisioning directory but missing from the IM corporate directory:

   set ETAHOME="C:\Program Files (x86)\CA\Identity Manager\Provisioning Server"set HOST=YourProvServerset DOMAIN=imset USERDN="eTGlobalUserName=superadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=%DOMAIN%,dc=eta"set PASSWD=secretset BASEDN="eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta"set FILTER="(&(objectClass=eTGlobalUser) (| (!(eTCustomField11=*)) (!(eTCustomField11=IM)) ) )"set ATTRIB=eTGlobalUserName%ETAHOME%\bin\ldapsearch -LLL -h %HOST% -p 20389 -D %USERDN% -w %PASSWD% -b %BASEDN% -s sub %FILTER% %ATTRIB%

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.