6.15 Placement - Subscriber Mirrored - LDAP Format

This rule places objects in the data store by using the mirrored structure in the Identity Vault from a specified point. Implement the rule on the Placement policy in the driver. You can implement the rule only on the Subscriber channel.

There are two steps involved in using the predefined rules: creating a policy in the Placement policy set, and importing the predefined rule. If you already have a Placement policy that you want to add this rule to, skip to Importing the Predefined Rule.

6.15.1 Creating a Policy

  1. Open the Identity Manager Driver Overview for the driver you want to manage.

  2. Click the Placement Policy object on the Subscriber channel.

  3. Click Insert.

  4. Name the policy, make sure to implement the policy with the Policy Builder, then click OK.

    The Rule Builder is launched.

  5. Continue with Section 6.15.2, Importing the Predefined Rule.

6.15.2 Importing the Predefined Rule

  1. In the Rule Builder, click Insert.

  2. Select Placement - Subscriber Mirrored - LDAP Format.

    Placement - subscriber mirrored - LDAP format

  3. To edit the rule, click Placement - Subscriber Mirrored - LDAP Format in the Rule Builder.

  4. Delete [Enter base of source hierarchy] from the Value field.

  5. Browse to and select the container in the source hierarchy where you want the object to be acted upon, then click OK.

  6. Delete [Enter base of destination hierarchy] from the Enter String field.

  7. Click the Edit Arguments icon to launch the Argument Builder.

  8. Select Text in the Noun list, then click Add.

  9. In the Editor, click the browse button, then browse to and select the container in the destination hierarchy where you want the object to be placed, then click OK.

  10. Click OK.

6.15.3 How the Rule Works

If the User object resides in the specified source subtree, then the object is placed at the same relative name and location within the Identity Vault. You must supply the DN's of the source (Identity Vault) and destination (connected system) subtrees. The connected system must use an LDAP-formatted DN.