IBM Security Identity Manager Version 6.0
Siebel JDB Adapter User Guide
SC27-4418-02
IBM Security Identity Manager Version 6.0
Siebel JDB Adapter User Guide
SC27-4418-02
Note Before using this information and the product it supports, read the information in “Notices” on page 45.
Edition notice Note: This edition applies to version 6.0 of IBM Security Identity Manager (product number 5724-C34) and to all subsequent releases and modifications until otherwise indicated in new editions. © Copyright IBM Corporation 2012, 2014. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents Tables . . . . . . . . . . . . . . . v Preface . . . . . . . . . . . . . . vii About this publication . . . . . . Access to publications and terminology . Accessibility . . . . . . . . . . Technical training . . . . . . . . Support information . . . . . . . Statement of Good Security Practices .
. .
. .
. . . .
. .
. . . .
. vii . vii . viii . viii . viii . viii
. . . .
Chapter 1. Introduction to the Siebel JDB Adapter . . . . . . . . . . . . . 1 Features of the Siebel JDB Adapter .
.
.
.
.
.
. 1
Chapter 2. Checklist for configuring IBM Security Identity Manager to run the adapter . . . . . . . . . . . . . . . 3 Chapter 3. Configuration of view modes of business components . . . . . . . 5 View modes in the custom XML files . . . . . . Configuration of the MVGBusComponent view mode Reconciling custom values of the MVGBusComponent for support data . . . . . Reconciling custom values of the MVGBusComponent for user data . . . . . . Adding or modifying User or Employee with custom values for the MVGBusComponent . . .
. . . . . . . . .
. . . . . . . . .
. . . . . . . . .
. . . . . . . . .
. . . . . . . . .
. 17 18 . 19 . 20 . 20 . 21 . 22 . 23
Chapter 6. Reconciling new support data attributes . . . . . . . . . . . 27 Custom XML file . . . . . . . . . . . . Attributes for the schema.dsml file . . . . . . Adding a connector to the siebelJDBSearch assembly line . . . . . . . . . . . . . . . . . Connection parameter mapping details for the service.def file . . . . . . . . . . . . .
28 28 29 30
5 7
Chapter 7. Troubleshooting of the Siebel JDB Adapter . . . . . . . . . 31
7
Appendix A. Adapter attributes . . . . 33
8
Appendix B. Definitions for ITDI_HOME and ISIM_HOME directories . . . . . . 37
8
Chapter 4. Siebel JDB Adapter user account management tasks . . . . . . 11 Reconciliation of user accounts . . . Reconciling supporting data . . . User accounts . . . . . . . . Attributes for adding user accounts User account modification . . . . Password change of user accounts . User account suspension . . . . . User account restoration . . . . . User account deletion . . . . . .
Attributes in custom XML files . . . . . . . Adding an attribute to the Siebel JDB account form Attribute for the adapter profile . . . . . . Mapping attributes . . . . . . . . . . . Assembly line icons . . . . . . . . . Mapping attributes to the siebelJDBAdd assembly line . . . . . . . . . . . . Mapping attributes to the siebelJDBModify assembly line . . . . . . . . . . . . Mapping attributes to the siebelJDBSearch assembly line . . . . . . . . . . . .
11 12 12 13 14 16 16 16 16
Appendix C. Support information . . . 39 Searching knowledge bases . Obtaining a product fix . . Contacting IBM Support . .
. . .
. . .
. . .
. . .
. . .
. . .
. . .
. 39 . 40 . 40
Appendix D. Accessibility features for IBM Security Identity Manager . . . . 43 Notices . . . . . . . . . . . . . . 45 Index . . . . . . . . . . . . . . . 49
Chapter 5. Customization of the Siebel JDB account form . . . . . . . . . . 17 Types of business component attributes .
© Copyright IBM Corp. 2012, 2014
.
.
.
. 17
iii
iv
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Tables 1. 2. 3. 4. 5.
6. 7. 8. 9. 10. 11. 12.
Checklist for configuring IBM Security Identity Manager . . . . . . . . . . . . . . 3 Installation directories . . . . . . . . . 4 Custom XML files used for user account management . . . . . . . . . . . . 5 Default values of view modes for different business components . . . . . . . . . . 6 Default values of view modes for MVG business components and PickList business components in the UserList.xml file . . . . 6 View mode specification in the custom XML files . . . . . . . . . . . . . . . 7 Required attributes for adding user accounts 13 Required attributes for adding user accounts as Employee . . . . . . . . . . . . 13 Definition of attributes in a custom XML file 17 Assembly line icons . . . . . . . . . . 20 Connectors of the siebelJDBAdd assembly line 21 Connectors of the siebelJDBModify assembly line . . . . . . . . . . . . . . . 22
© Copyright IBM Corp. 2012, 2014
13. 14. 15. 16. 17. 18. 19. 20. 21. 22.
Connectors of the siebelJDBSearch assembly line . . . . . . . . . . . . . . Error messages and suggested actions. . . Attributes, descriptions, and corresponding Siebel attributes for erTDISblJDBAccount . . Attributes, descriptions, and corresponding Siebel attributes for erTDISblResponsibility Attributes, descriptions, and corresponding Siebel attributes for erTDISblPosition. . . Attribute, description, and corresponding Siebel attribute for erTDISblTZones . . . . Attribute, description, and corresponding Siebel attribute for erTDISblTitles . . . . Attribute, description, and corresponding Siebel attribute for erTDISblEmpNotify . . Attribute, description, and corresponding Siebel attribute for erTDISblEmpAvail . . . Attributes, descriptions, and corresponding Siebel attributes for erTDISblBU . . . . .
. 24 . 31 . 33 . 34 . 34 . 35 . 35 . 35 . 35 . 35
v
vi
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Preface About this publication The Siebel JDB Adapter User Guide provides the basic information that you can use to complete Siebel administrative tasks with the IBM® Security Identity Manager Siebel Java™ Data Beans Adapter (Siebel JDB Adapter). The Siebel JDB Adapter enables connectivity between the IBM Security Identity Manager server and a Siebel Server. IBM Security Identity Manager was previously known as Tivoli® Identity Manager.
Access to publications and terminology This section provides: v A list of publications in the “IBM Security Identity Manager library.” v Links to “Online publications.” v A link to the “IBM Terminology website.”
IBM Security Identity Manager library For a complete listing of the IBM Security Identity Manager and IBM Security Identity Manager Adapter documentation, see the online library (http://www-01.ibm.com/support/knowledgecenter/SSRMWJ/welcome).
Online publications IBM posts product publications when the product is released and when the publications are updated at the following locations: IBM Security Identity Manager library The product documentation site (http://www-01.ibm.com/support/ knowledgecenter/SSRMWJ/welcome) displays the welcome page and navigation for the library. IBM Security Systems Documentation Central IBM Security Systems Documentation Central provides an alphabetical list of all IBM Security Systems product libraries and links to the online documentation for specific versions of each product. IBM Publications Center The IBM Publications Center site ( http://www-05.ibm.com/e-business/ linkweb/publications/servlet/pbi.wss) offers customized search functions to help you find all the IBM publications you need.
IBM Terminology website The IBM Terminology website consolidates terminology for product libraries in one location. You can access the Terminology website at http://www.ibm.com/ software/globalization/terminology.
© Copyright IBM Corp. 2012, 2014
vii
Accessibility Accessibility features help users with a physical disability, such as restricted mobility or limited vision, to use software products successfully. With this product, you can use assistive technologies to hear and navigate the interface. You can also use the keyboard instead of the mouse to operate all features of the graphical user interface.
Technical training For technical training information, see the following IBM Education website at http://www.ibm.com/software/tivoli/education.
Support information IBM Support provides assistance with code-related problems and routine, short duration installation or usage questions. You can directly access the IBM Software Support site at http://www.ibm.com/software/support/probsub.html. Appendix C, “Support information,” on page 39 provides details about: v What information to collect before contacting IBM Support. v The various methods for contacting IBM Support. v How to use IBM Support Assistant. v Instructions and problem-determination resources to isolate and fix the problem yourself. Note: The Community and Support tab on the product information center can provide additional support resources.
Statement of Good Security Practices IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM DOES NOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES ARE IMMUNE FROM, OR WILL MAKE YOUR ENTERPRISE IMMUNE FROM, THE MALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY.
viii
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 1. Introduction to the Siebel JDB Adapter The Siebel JDB Adapter is an application that provides connectivity between IBM Security Identity Manager and the Siebel server. The adapter runs as a service, independent of whether you are logged on to IBM Security Identity Manager. The adapter runs on a workstation where the IBM Tivoli Directory Integrator is installed. The adapter needs the Dispatcher installed on the same workstation where the IBM Tivoli Directory Integrator is installed. IBM Security Identity Manager uses Remote Method Invocation (RMI) calls to communicate with the dispatcher. The dispatcher uses the IBM Tivoli Directory Integrator to run the adapter. You can use the Siebel JDB Adapter and IBM Security Identity Manager to automate the following user account management tasks: v Adding user accounts to the Siebel server v Modifying attributes of Siebel user accounts v Changing passwords of Siebel user accounts v Suspending, restoring, and deleting Siebel user accounts v Retrieving user accounts from the Siebel server
Features of the Siebel JDB Adapter The adapter automates user account management tasks. The Siebel JDB Adapter supports: v Reconciliation of user accounts and other support data, such as time zones, employee organizations, positions, responsibilities, personal titles, availability status, and notification types from the Siebel server to the directory server of IBM Security Identity Manager. v User account management tasks, such as add, modify (including password change), suspend, restore, and delete to manage accounts on the Siebel server by using IBM Security Identity Manager. v Customization of the Siebel JDB account form.
© Copyright IBM Corp. 2012, 2014
1
2
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 2. Checklist for configuring IBM Security Identity Manager to run the adapter You must multiple tasks that install and configure the Siebel JDB Adapter. Table 1 Table 1. Checklist for configuring IBM Security Identity Manager Task
For information, see the section in the following documentation:
Install the Siebel JDB Adapter
Installing the Siebel JDB Adapter in the Siebel JDB Adapter Installation and Configuration guide.
Import the adapter profile into IBM Security Identity Manager
Importing the adapter profile into the IBM Security Identity Manager server in the Siebel JDB Adapter Installation and Configuration guide.
Create a service for the Siebel JDB Adapter
Creating the service in the Siebel JDB Adapter Installation and Configuration guide. Note: After you create a Siebel JDB Adapter service, the IBM Security Identity Manager server creates a default provisioning policy for the adapter service. You can customize a provisioning policy for the Siebel JDB Adapter service according to your organizational requirements. For more information, see the section about customizing a provisioning policy in the IBM Security Identity Manager product documentation.
Configure the Siebel JDB Adapter
Configuring the Siebel JDB Adapter in the Siebel JDB Adapter Installation and Configuration guide.
Managing reconciliation schedules in the IBM Perform a reconciliation operation to retrieve user accounts and store them in the Security Identity Manager product IBM Security Identity Manager server documentation. Adopt orphan accounts on IBM Security Identity Manager
Assigning an orphan account to a user in the IBM Security Identity Manager product documentation.
Table 2 on page 4 identifies the installation directories that you might need to access when using the adapter.
© Copyright IBM Corp. 2012, 2014
3
Table 2. Installation directories Required information Description
Value
IBM Tivoli Directory Integrator Home Directory (ITDI_HOME)
If IBM Tivoli Directory Integrator is automatically installed with your IBM Security Identity Manager product, the default directory path for IBM Tivoli Directory Integrator is as follows:
The ITDI_HOME directory contains the jars/connectors subdirectory that contains adapter JAR files.
Windows: v for version 7.1: drive\Program Files\IBM\TDI\V7.1 UNIX: v for version 7.1: /opt/IBM/TDI/V7.1 Solution Directory (ADAPTER_SOLDIR)
When you install the dispatcher, the adapter prompts you to specify a file path for the solution directory. For more information about the solution directory, see the Dispatcher Installation and Configuration Guide.
The default solution directory is: Windows: v for version 7.1: drive\Program Files\IBM\TDI\V7.1\ timsol UNIX: v for version 7.1: /opt/IBM/TDI/V7.1/ timsol
4
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 3. Configuration of view modes of business components A business component is a logical grouping of data on the Siebel server. For example, the User business component consists of employee flag, login name, password, family name, first name , middle name, job title, and alias attributes. A view mode determines the access controls that you can apply to a business component in a view. The visibility component of a business component decides the user access control. For information about view modes corresponding to different business components, see the Siebel documentation. You can use custom XML files to configure view modes of different business components. These custom XML files exist in the ADAPTER_SOLDIR\ SiebelCustomXMLs\ directory. The following table lists the custom XML files that are used for managing user accounts and for retrieving support data attributes. Table 3. Custom XML files used for user account management Used for
Business object
Business component
Custom XML file
User account management
User List
User
UserList.xml
User account management
Employee
Employee
Employee.xml
Support data reconciliation - Availability
List Of Values List Of Values
AvailStatusTypes.xml
Support data reconciliation - Standard/Emergency Notification
List Of Values List Of Values
NotificationTypes.xml
Support data reconciliation - Organization
Organizations Organization
Organization.xml
Support data reconciliation - Personal title (Mr./Mrs.)
List Of Values List Of Values
PersonalTitle.xml
Support data reconciliation - Position
Employee
Position
Positions.xml
Support data reconciliation - Responsibility
Employee
Responsibility
Responsibility.xml
Support data reconciliation - Time Zone
Time Zone
Time Zone
TimeZone.xml
View modes in the custom XML files When managing user accounts, you can configure the view mode values specified in the custom XML files according to your requirements. The following table gives the default values of view modes for different business components.
© Copyright IBM Corp. 2012, 2014
5
Table 4. Default values of view modes for different business components XML file name
Business component
Default value of view mode
UserList.xml
User
5
Employee.xml
Employee
5
AvailStatusTypes.xml
List Of Values
9
NotificationTypes.xml
List Of Values
9
Organization.xml
Organization
9
PersonalTitle.xml
List Of Values
9
Positions.xml
Position
9
Responsibility.xml
Responsibility
9
TimeZone.xml
Time Zone
9
Note: The adapter ignores the view mode values in the following XML files, which have the searchSpecificationAttribute or the searchSpecificationValue specified for a business component: v PersonalTitle.xml v NotificationTypes.xml v AvailStatusTypes.xml However, the viewMode attribute is a required attribute in the definition of a business component, and cannot be deleted. The following table gives the default values of view modes for the Multi-Value Group (MVG) business component. It also provides the default values for the PickList business component attributes in the UserList.xml file. For information about identifying types of attributes, see Identifying types of business component attributes. Table 5. Default values of view modes for MVG business components and PickList business components in the UserList.xml file Type of attribute
Name of support data attribute
Default value of view mode
PicklistBusComponent
Time Zone
9
PicklistBusComponent
Personal Title
9
PicklistBusComponent
Availability Status
9
PicklistBusComponent
Standard Notification
9
PicklistBusComponent
Emergency Notification
9
MVGBusComponent
Employee Organization
9
MVGBusComponent
Responsibility
9
MVGBusComponent
Position
9
The following table lists the numeric values that you can specify in the definition of a business component for a view mode, and their meaning.
6
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Table 6. View mode specification in the custom XML files View mode value
View name
Meaning
0
SalesRepView
Users can access records owned by them or can access records whose team contains their position.
1
ManagerView
Users can access records associated with their own position and positions that report directly to them.
2
PersonalView
Users can access records with which their person records are associated.
3
AllView
Users can access all records, except those records with a missing or an invalid owner.
5
OrganizationView
Users can access records that are associated with a single organization or with multiple organizations to which their position is linked.
6
ContactView
Users can access records that are associated with a single organization to which their position is linked.
7
GroupView
Users can access categories of master data that are associated with any of the access groups with which they are associated. Users are associated with an access group if during the current session, they are associated with a position, organization, account, household, or a user list that is a member of the access group.
8
CatalogView
Users can access a flat (uncategorized) list of data in all of the categories across catalogs to which all of the user’s access groups have access. Users are associated with an access group if during the current session, they are associated with a position, organization, account, household, or a user list that is a member of the access group.
9
SubOrganizationView
Users can access records associated with their active organization or a descendant organization.
Configuration of the MVGBusComponent view mode This section provides information about configuring the view mode to reconcile, add, and modify the custom values of the MVGBusComponent.
Reconciling custom values of the MVGBusComponent for support data The Siebel JDB Adapter uses the CustomXML file in the ADAPTER_SOLDIR\ SiebelCustomXMLs directory for reconciliation. The view mode property in the CustomXML file of a particular MVGBusComponent determines which values of a particular support data are reconciled.
About this task By default, the view mode for MVGBusComponent is 9, SubOrganizationView. This view mode reconciles records associated with active organization and descendant organizations. However, the view mode does not reconcile the custom MVGBusComponents that are available on the managed resource. Chapter 3. Configuration of view modes of business components
7
To reconcile the custom MVGBusComponent, set the view mode in the CustomXmls directory for support data to 3, ALL view. Set the view mode property to 3 in the CustomXML file of the MVGBusComponent whose custom values you want to reconcile.
Procedure 1. Open the Position.xml file in the ADAPTER_SOLDIR\SiebelCustomXMLs directory 2. Modify the file. From
to
3. Save the Position.xml file. 4. Restart the adapter service and run the reconciliation operation from IBM Security Identity Manager.
Reconciling custom values of the MVGBusComponent for user data The Siebel JDB Adapter uses the UserList.xml file for user reconciliation. By default, the view mode property in the UserList.xml file is set to 5, Organizational View.
About this task This mode reconciles the user data except the custom values for the MVGBusComponent associated with a particular user. To reconcile the complete user data, including the custom values for MVGBusComponent, set the view mode property in UserList.xml to 3, ALL View. The adapter uses UserList.xml to reconcile the user accounts and the employee accounts.
Procedure 1. Open the UserList.xml file in the ADAPTER_SOLDIR\SiebelCustomXMLs directory 2. Modify the file. From
to
3. Save the UserList.xml file. 4. Restart the adapter service and run the reconciliation operation from IBM Security Identity Manager.
Adding or modifying User or Employee with custom values for the MVGBusComponent The Siebel JDB Adapter uses the UserList.xml file to create User accounts and Employee.xml to create Employee accounts on the managed resource.
About this task These files are in the ADAPTER_SOLDIR\SiebelCustomXMLs directory.
8
IBM Security Identity Manager: Siebel JDB Adapter User Guide
By default, the property view Mode for MVGBusComponent attributes in the UserList.xml file and Employee.xml file is 9. To associate the custom MVGBusComponent values to account types User and Employee, you must set the view mode property in the UserList.xml file and Employee.xml file to 3. For example, to associate Position with a user or employee the UserList.xml file and Employee.xml file must have viewMode property set to 3 for the MVGBusComponent Position. When the view mode is 9, the adapter generates the following message for custom MVGBusComponent value: Specified Position not found.
To add user or employee account with the custom values, set the view mode property to 3 in the CustomXML file of the MVGBusComponent.
Procedure 1. Open the Employee.xml file in the ADAPTER_SOLDIR\SiebelCustomXMLs directory 2. Modify the file. From
to
3. Save the Employee.xml file. 4. Restart the adapter service and run the reconciliation operation from IBM Security Identity Manager.
Chapter 3. Configuration of view modes of business components
9
10
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 4. Siebel JDB Adapter user account management tasks IBM Security Identity Manager manages user accounts stored on the Siebel server by using the Siebel JDB Adapter. You can complete operations, such as reconciliation, add, modify (including password change), suspend, restore, and delete to manage your accounts. You can manage: v Accounts for a specific person. v Accounts for a service instance. v Specific accounts by using the search function of IBM Security Identity Manager. Before you use the adapter to complete an operation, v Ensure that you complete the steps given in Chapter 2, “Checklist for configuring IBM Security Identity Manager to run the adapter,” on page 3. v Use one of the following methods to run the Dispatcher. The Dispatcher in turn runs the Siebel JDB Adapter. – Windows services in service mode 1. In the Windows control panel, double-click Administrative Tools. 2. Double-click Services. 3. Right-click the IBM Security Identity Manager Adapter service, and click Start. – Windows command prompt in console mode Go to the ADAPTER_SOLDIR directory and run the following command: ibmdisrv -s ADAPTER_SOLDIR -c ITIM_RMI.xml –d v Ensure that the view mode values specified in the custom XML files are configured correctly for your requirements. For information about configuring view modes in the custom XML files, see Configuring view modes in the custom XML files.
Reconciliation of user accounts The reconciliation operation retrieves the user account information from the Siebel server and stores it in the directory server of IBM Security Identity Manager. You can schedule reconciliation to run at specific times and to return specific parameters. Running a reconciliation before its schedule time does not cancel the scheduled reconciliation. For more information about scheduling reconciliation and running a scheduled reconciliation, see the IBM Security Identity Manager product documentation. You can also complete the following reconciliation tasks at any time from IBM Security Identity Manager: v Reconciling support data v Reconciling a single user account The reconciliation of the Siebel user accounts and supporting data depends on the view mode values. These values are specified for the different business © Copyright IBM Corp. 2012, 2014
11
components in the Siebel custom XML files. For information about configuring view modes in the custom XML files, see Configuring view modes in the custom XML files.
Reconciling supporting data You can use IBM Security Identity Manager to reconcile support data at any time.
Before you begin Ensure that the view mode values specified in the custom XML files are according to your requirements.
About this task Supporting data for a Siebel user account includes the following information: v Time zone v Employee organizations v Positions v Responsibilities v Personal title (Mr or Mrs) v Availability status v Notification types For more information about each of these attributes, see the Siebel documentation.
Procedure 1. Log on to IBM Security Identity Manager as an administrator. 2. In the My Work pane, click Manage Services. The Manage Services page opens. 3. Select the type of service from the Service type list and click Search. 4. Select the name of the service that you created for the Siebel JDB Adapter. 5. Click the arrow icon to view the View popup menu and select Reconcile Now. The Reconcile Now page opens. 6. Click Define query. 7. Select the Reconcile supporting data only check box and click Submit.
User accounts You can add user accounts at any time for either an existing person or a new person in the organization. This section describes the adapter attributes that define the accounts on the account form. For specific procedures, see the IBM Security Identity Manager product documentation. If you specify Database (DB) Authentication in the service form of the Siebel JDB Adapter, then during the add operation, the adapter: v Adds the user account to the Siebel server v Adds the login details of the user account to the database If you specify Lightweight Directory Access Protocol (LDAP) Authentication in the service form of the Siebel JDB Adapter, then during the add operation:
12
IBM Security Identity Manager: Siebel JDB Adapter User Guide
v The adapter adds the user account to the Siebel server. v The Siebel server in turn adds the user account to the LDAP server.
Attributes for adding user accounts To add user accounts to the Siebel server, you must specify attributes on the Siebel JDB account form. Specify the following required attributes on the Siebel JDB account form. Table 7. Required attributes for adding user accounts Attribute
Description
User ID
User ID of the account
Last name
Surname of the account holder
First name
Given name of the account holder
To add user accounts as an Employee, specify the following required attributes on the Siebel JDB account form. Table 8. Required attributes for adding user accounts as Employee Attribute
Description
User ID
User ID of the account
Last name
Surname of the account holder
First name
Given name of the account holder
Positions
Position of the employee in an organization. For example, Siebel Administrator. Note: This attribute is a required attribute only when you want to consider the user as an Employee.
Note: By default, the account holder is considered as the User. To consider the account holder as an Employee, select the Is Employee check box on the account form. In addition to the required attributes, you can also specify the other optional attributes on the Siebel JDB account form. Specifying the Available until : Date and the Available until : Time attributes The default value of the Available until : Date and the Available until : Time attributes on the Siebel JDB account form is Never. Add a user account with the following attributes specified on the Siebel JDB account form: v User ID v First name v Last name v Is Employee? When you perform an add operation, the adapter adds the user account on the Siebel server. The user record is not displayed on the Employee page of the Siebel
Chapter 4. Siebel JDB Adapter user account management tasks
13
Web client. To display the record of an employee user on the Siebel Web client, clear the Never check box next to the Available until : Time attribute on the Siebel JDB account form. Available until : Date The end date up to which an employee user is displayed on the Employee page of the Siebel Web client. To specify a date: 1. Clear the Never check box. 2. Click the View Calendar icon and select the month, year, and date. 3. Click OK. Available until : Time The time up to which an employee user is displayed on the Employee page of the Siebel Web client. To specify a time: 1. Clear the Never check box. 2. Click the View Time icon and select the time. 3. Click OK.
User account modification You can modify user account attributes at any time in IBM Security Identity Manager. This section describes the adapter attributes that you can use to modify the user accounts. For specific procedures, see the IBM Security Identity Manager product documentation. You can modify values of the attributes on the following pages of the Siebel JDB account form: v USER v ACCESS CONTROL v USER INFO Modifiable attributes on the USER page of the Siebel JDB account form v Last name v First name v Middle name v Job title v Alias v Time zone Note: You cannot delete values of the Last name, First name, and Time zone attributes. Modifiable attributes on the ACCESS CONTROL page of the Siebel JDB account form v Is Employee? v Employee Organizations v Primary Employee Organization v Positions v Primary position v Responsibilities in database
14
IBM Security Identity Manager: Siebel JDB Adapter User Guide
v Responsibilities in LDAP Note: v You can delete values of the Employee Organization attribute, but you cannot add an organization name to the attribute. v You must not modify the Employee Organization attribute when you are adding organizations to a User account. Siebel does not support changing the Employee Organization that is associated with a User account. v By default, Siebel assigns Default Organization as the Employee Organization attribute value when you create an account. Do not specify the value Default Organization when you add a User or Employee account on Siebel. If you do specify this value, the Siebel JDB adapter returns a warning for the Employee Organization attribute. v You cannot delete the employee organization name from the Employee Organizations field that is specified as the primary employee organization in the Primary Employee Organization field. Siebel does not support deletion of the primary organization. v You cannot delete the position from the Positions field that is specified as the primary position in the Primary position field. Siebel does not support deletion of the primary position. v After you create a User account or an Employee account by using IBM Security Identity Manager, you cannot convert a User account to an Employee account or vice versa. v Siebel assigns a default Responsibility value when you create an account. You can configure the default value that Siebel uses. For example, you can configure Siebel to assign a Responsibility value of Siebel Administrator to new User or Employee accounts by default. Do not specify a value for the Responsibility attribute when you add a User or Employee account on Siebel. If you do specify a value, the Siebel JDB adapter returns a warning for this attribute. Modifiable attributes on the USER INFO page of the Siebel JDB account form v Employee number v Mr/Mrs v v v v v v v
Short name Availability Available until: Date Available until: Time Standard notification Emergency notification Email
v v v v v v
Fax number Home phone Work phone Cell phone Pager number Pager pin
Note: You cannot delete values of the Mr/Mrs, Availability, Standard notification, and Emergency notification attributes. Chapter 4. Siebel JDB Adapter user account management tasks
15
Password change of user accounts You can change the password of any of the Siebel accounts that exist on IBM Security Identity Manager. For information about changing passwords, see the IBM Security Identity Manager product documentation.
User account suspension When you suspend a user account, the status of the user account on IBM Security Identity Manager becomes inactive, and the user account becomes unavailable for use. Suspending a user account does not remove the user account from IBM Security Identity Manager. For more information about suspending user accounts, see the IBM Security Identity Manager product documentation. When you suspend a user account from IBM Security Identity Manager, the suspended user cannot access the Siebel server.
User account restoration The restore operation reinstates the suspended user accounts to IBM Security Identity Manager. After restoring a user account, the status of the user account on IBM Security Identity Manager becomes active. For more information about restoring user accounts, see the IBM Security Identity Manager product documentation. When you restore a user account from IBM Security Identity Manager, the reinstated user can access the Siebel server.
User account deletion Use the deprovision feature of IBM Security Identity Manager to delete user accounts. For more information about deleting user accounts, see the IBM Security Identity Manager product documentation. If you specify DB Authentication in the service form of the Siebel JDB Adapter, then during the delete operation, the adapter: v Deletes the user account from the Siebel server v Deletes the login details of the user account from the database If you select the following options in the service form of the Siebel JDB Adapter: v LDAP Authentication as the authentication type v The Remove LDAP user on Delete? check box Then, during the delete operation, the adapter deletes the user account from the LDAP server.
16
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 5. Customization of the Siebel JDB account form The Siebel JDB Adapter supports a standard set of attributes. You can customize the adapter to support additional attributes on the Siebel server.
Types of business component attributes The Siebel JDB Adapter categorizes attributes of different business components into various types. The Siebel JDB Adapter categorizes the attributes into the following types: v Simple attributes - single-valued attributes v PicklistBusComponent attributes - single-valued attributes v MVGBusComponent attributes - multivalued attributes To identify the type of a business component attribute, open the Siebel Tools application and navigate to the required business component in the Object Explorer pane. Identifying a simple attribute An attribute of a business component that does not have a value in the Picklist column of the Single Value Fields pane is a simple attribute. For example, Employee Id is a simple attribute that belongs to the User business component. Identifying a PicklistBusComponent attribute An attribute of a business component that has a value in the Picklist column of the Single Value Fields pane is a PicklistBusComponent attribute. For example, Availability Status is a PicklistBusComponent attribute that belongs to the User business component. Identifying a MVGBusComponent attribute An attribute that has a value in the Multivalue Link column of the Multivalue Fields pane is an MVGBusComponent attribute. For example, Responsibility is an MVGBusComponent attribute that belongs to the User business component.
Attributes in custom XML files Before adding an attribute to the Siebel JDB account form, you must define the attribute in the custom XML files. The following table gives the definitions of different types of attributes in a custom XML file. Table 9. Definition of attributes in a custom XML file Type of attribute
Example
Definition in a custom XML file
Simple
Employee Id
© Copyright IBM Corp. 2012, 2014
17
Table 9. Definition of attributes in a custom XML file (continued) Type of attribute
Example
Definition in a custom XML file
PicklistBusComponent
Availability Status
MVGBusComponent
Responsibility
Adding an attribute to the Siebel JDB account form You can customize account forms for Siebel JDB business components by adding attributes to the Siebel JDB Adapter profile.
Procedure 1. Log on to the workstation where the Siebel JDB Adapter is installed. 2. Copy the SiebelJDBProfile.jar file to the \temp directory. 3. Extract the contents of the SiebelJDBProfile.jar file to the \temp directory Run the command: cd c:\temp jar -xvf SiebelJDBProfile.jar
This command creates the c:\temp\SiebelJDBProfile directory. 4. Add the attribute to the Siebel JDB Adapter profile. For more information about adding an attribute to the adapter profile, see “Attribute for the adapter profile” on page 19. 5. Map the attribute to the assembly lines. For more information about mapping an attribute to the assembly line, see “Mapping attributes” on page 20. 6. Go to the IBM Tivoli Directory Integrator installation directory, and run the following command to break the assembly lines. java –classpath jars\ITLMToolkit.jar;jars\miconfig.jar;jars\miserver.jar; jars\mmconfig.jar;jars\diserverapi.jar;jars\log4j-1.2.8.jar; jars\itdiAgents-common.jar com.ibm.di.utils.IDIConfigHelper "c:\\temp\\SiebelJDBProfile\\SiebelJDBAdapter.xml" "c:\\temp\\SiebelJDBProfile"
In this command, c:\temp\SiebelJDBAdapter.xml is the path of the SiebelJDBAdapter.xml file. 7. Use the files in the \temp directory to create a JAR file. Run the command: cd c:\temp jar -cvf SiebelJDBProfile.jar SiebelJDBProfile
8. Import the SiebelJDBProfile.jar file to the IBM Security Identity Manager server. For more information about importing the SiebelJDBProfile.jar file, see the Siebel JDB Adapter Installation and Configuration guide. Under "Installing the Siebel JDB Adapter," search for the section "Importing the adapter profile into the IBM Security Identity Manager server." 9. Stop and start the IBM Security Identity Manager server.
18
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Attribute for the adapter profile To add attributes to the adapter profile, you must modify the CustomLabels.properties and schema.dsml files. You must update profiles or specifications of the new attributes in the following files: CustomLabels.properties The CustomLabels.properties file contains a list of attributes that are supported by IBM Security Identity Manager and their corresponding labels. For example, you want to add an attribute erTDISblMaidenName to the USER page of the Siebel JDB account form. Specify the attribute in the CustomLables.properties file as follows: ### ertdisblusertab erTDISblMaidenName=Maiden Name
In this example: ertdisblusertab Defines the tab on which the erTDISblMaidenName attribute is displayed. erTDISblMaidenName=Maiden Name Defines the label, Maiden Name, for the erTDISblMaidenName attribute. IBM Tivoli Directory Integrator recognizes the new attribute by the name erTDISblMaidenName. schema.dsml Defines an attribute. It contains the schema for attributes and object classes in the profile. For example, the following section of the schema.dsml file defines the erTDISblMaidenName attribute and adds the erTDISblMaidenName attribute to the erTDISblJDBAccount class: erTDISblMaidenName Maiden Name 1.3.6.1.4.1.6054.3.137.2.65 1.3.6.1.4.1.1466.115.121.1.15 erTDISblJDBAccount Siebel JDB Account 1.3.6.1.4.1.6054.3.137.1.14
In this example: Specifies the value of the attribute type as single. erTDISblMaidenName Defines the name of the erTDISblMaidenName attribute. Maiden Name Provides the description for the Maiden Name attribute. 1.3.6.1.4.1.6054.3.137.2.65 Specifies the unique identifier for the erTDISblMaidenName attribute. Chapter 5. Customization of the Siebel JDB account form
19
1.3.6.1.4.1.1466.115.121.1.15 Refers to the syntax of the erTDISblMaidenName attribute type. erTDISblJDBAccount Siebel JDB Account 1.3.6.1.4.1.6054.3.137.1.14
Adds the erTDISblMaidenName attribute to the erTDISblJDBAccount class. Note: Each attribute must have a unique identifier. In addition, the identifier must be unique in the directory server where the attribute is stored.
Mapping attributes Use this procedure to map the newly added attributes of Component Interfaces supported by IBM Security Identity Manager to the assembly lines.
Procedure 1. Run the IBM Tivoli Directory Integrator. 2. Click File > Open. 3. Select the SiebelJDBAdapter.xml file from the temporary folder where the Siebel JDB Adapter profile was extracted, and click Open. 4. In the navigation pane, expand the AssemblyLines tree. a. Select the siebelJDBAdd assembly line and map the attributes to the siebelJDBAdd assembly line. For more information about mapping attributes to the siebelJDBAdd assembly line, see “Mapping attributes to the siebelJDBAdd assembly line” on page 21. b. Select the siebelJDBModify assembly line and map the attributes to the siebelJDBModify assembly line. For more information about mapping attributes to the siebelJDBModify assembly line, see “Mapping attributes to the siebelJDBModify assembly line” on page 22. c. Select the siebelJDBSearch assembly line and map the attributes to the siebelJDBSearch assembly line. For more information about mapping attributes to the siebelJDBSearch assembly line, see “Mapping attributes to the siebelJDBSearch assembly line” on page 23. 5. Save changes to the assembly lines.
Assembly line icons You can use Tivoli Directory Integrator assembly line icons to map attributes. The following table lists the Tivoli Directory Integrator assembly line icons that you can use to map attributes. Table 10. Assembly line icons Icon
Name Add an Attribute to the Attribute map
Switch between List, Detail, and Schema view
20
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Table 10. Assembly line icons (continued) Icon
Name Connect to the data source
Read the next entry Add new Link Criteria
Mapping attributes to the siebelJDBAdd assembly line You can add a value to an attribute by mapping the attribute to the siebelJDBAdd assembly line.
About this task The following table lists the connectors of the siebelJDBAdd assembly line, the corresponding business components, and support data attributes. Table 11. Connectors of the siebelJDBAdd assembly line Connector
Business component
Name of support data attribute
siebelJDBConn
User
Users
siebelJDBConnEmp
Employee
Employee
To view the assembly line icons used while mapping attributes see Table 10 on page 20. As an example, this procedure maps the erTDISblMaidenName attribute to the siebelJDBAdd assembly line.
Procedure 1. Select the siebelJDBAdd assembly line. The siebelJDBAdd page opens. 2. Click Call/Return to open the Initial Work Entry page. a. Click Switch between List, Detail and Schema view in the toolbar until you see the Schema pane. b. Click Add a new attribute to the Attribute Map in the toolbar. c. Type the name of the new attribute as erTDISblMaidenName, and click OK. The erTDISblMaidenName attribute is displayed in the Work Attribute list. d. Click Add an attribute to the schema in the toolbar. e. Type the name of the new attribute as erTDISblMaidenName, and click OK. The erTDISblMaidenName attribute is displayed in the Schema pane. f. Click Switch between List, Detail and Schema view in the toolbar until you see the Attribute Map details pane. g. Select the erTDISblMaidenName attribute in the Work Attribute list. h. Select the erTDISblMaidenName check box in the Schema pane to map the attribute to the erTDISblMaidenName attribute in the Work Attribute list. 3. Click Data Flow to open the Data Flow page.
Chapter 5. Customization of the Siebel JDB account form
21
a. In the left pane, expand the Flow folder and select the siebelJDBConn or the siebelJDBConnEmp connector. The Config page opens in the right pane. b. Click the Output Map tab. The Output Map page opens. c. Click Switch between List, Detail and Schema view in the toolbar until you see the Schema pane. d. Click Add an attribute to the schema in the toolbar. e. Type the name of the new attribute as Maiden Name, and click OK. The Maiden Name attribute is displayed in the Schema pane. Note: The name of the attribute must match with attribute defined in the custom XML file. f. Drag the Maiden Name attribute to the Connector Attribute list. The Maiden Name attribute is displayed in the Connector Attribute list. g. Click Switch between List, Detail and Schema view in the toolbar until you see the Attribute Map details pane. h. Select the Maiden Name attribute from the Connector Attribute list. i. Select the erTDISblMaidenName check box from the Schema pane to map the erTDISblMaidenName attribute to the siebelJDBConn connector. Note: Complete this step if the attribute is a simple attribute or PicklistBusComponent attribute. To map a MVGBusComponent attribute, you must select the Advance Mapping Settings check box on the Attribute Map details pane. Then write scripts for mapping the MVGBusComponent attribute to the siebelJDBConn connector. 4. Save changes to the siebelJDBAdd assembly line.
Mapping attributes to the siebelJDBModify assembly line You can make an attribute modifiable by mapping the attribute to the siebelJDBModify assembly line.
About this task The following table lists the connectors of the siebelJDBModify assembly line, the corresponding business components, and support data attributes. Table 12. Connectors of the siebelJDBModify assembly line Connector
Business component
Name of support data attribute
siebelJDBConn
User
Users
siebelJDBConnEmp
Employee
Employee
To view the assembly line icons used while mapping attributes, see Table 10 on page 20. As an example, this procedure maps the erTDISblMaidenName attribute to the siebelJDBModify assembly line.
Procedure 1. Select the siebelJDBModify assembly line. The siebelJDBModify page opens. 2. Click Call/Return to open the Initial Work Entry page.
22
IBM Security Identity Manager: Siebel JDB Adapter User Guide
a. Click Switch between List, Detail and Schema view in the toolbar until you see the Schema pane. b. Click Add a new attribute to the Attribute Map in the toolbar. c. Type the name of the new attribute as erTDISblMaidenName, and click OK. The erTDISblMaidenName attribute is displayed in the Work Attribute list. d. Click Add an attribute to the schema in the toolbar. e. Type the name of the new attribute as erTDISblMaidenName, and click OK. The erTDISblMaidenName attribute is displayed in the Schema pane. f. Click Switch between List, Detail and Schema view in the toolbar until you see the Attribute Map details pane. g. Select the erTDISblMaidenName attribute in the Work Attribute list. h. Select the erTDISblMaidenName check box in the Schema pane to map the attribute to the erTDISblMaidenName attribute in the Work Attribute list. 3. Click the Data Flow tab to open the Data Flow page. a. In the left pane, expand the Flow folder and select the siebelJDBConn or the siebelJDBConnEmp connector. The Config page opens in the right pane. b. Click the Output Map tab. The Output Map page opens. c. Click Switch between List, Detail and Schema view in the toolbar until you see the Schema pane. d. Click Add an attribute to the schema in the toolbar. e. Type the name of the new attribute as Maiden Name, and click OK. The Maiden Name attribute is displayed in the Schema pane. Note: The name of the attribute must match with attribute defined in the custom XML file. f. Drag the Maiden Name attribute to the Connector Attribute list. The Maiden Name attribute is displayed in the Connector Attribute list. g. Click Switch between List, Detail and Schema view in the toolbar until you see the Attribute Map details pane. h. Select the Maiden Name attribute from the Connector Attribute list. i. Select the erTDISblMaidenName check box from the Schema pane to map the erTDISblMaidenName attribute to the siebelJDBConn connector. Note: Complete this step if the attribute is a simple attribute or PicklistBusComponent attribute. To map a MVGBusComponent attribute, you must select the Advance Mapping Settings check box on the Attribute Map details pane. Then write scripts for mapping the MVGBusComponent attribute to the siebelJDBConn connector. 4. Save the changes to the siebelJDBModify assembly line.
Mapping attributes to the siebelJDBSearch assembly line The siebelJDBSearch assembly line contains connectors corresponding to different business components and these business components contain different attributes. You can make the value of an attribute reconcilable by mapping the attribute (belonging to a business component) to the corresponding siebelJDBSearch assembly line connector.
Chapter 5. Customization of the Siebel JDB account form
23
About this task The following table lists the connectors of the siebelJDBSearch assembly line, the corresponding business components and support data attributes. Table 13. Connectors of the siebelJDBSearch assembly line Connector
Business component
Name of support data attribute
siebelJDBConnUsers
User
Users
siebelJDBConnAvail
List Of Values
Availability Status
siebelJDBConnNotfy
List Of Values
Standard Notification Emergency Notification
siebelJDBConnBU
Organization
Employee Organization
siebelJDBConnPerTitl
List Of Values
Personal Title
siebelJDBConnPostn
Position
Position
siebelJDBConnResp
Responsibility
Responsibility
siebelJDBConnTZone
Time Zone
Time Zone
To view the assembly line icons used while mapping attributes, see Table 10 on page 20. For As an example, this procedure reconciles the erTDISblMaidenName attribute that belongs to the User business component.
Procedure 1. Select the siebelJDBSearch assembly line. The siebelJDBSearch page opens. 2. Click the Data Flow tab to open the Data Flow page. 3. In the left pane, expand the Feeds folder and select the siebelJDBConnUsers connector. The Config page opens in the right pane. 4. Click the Input Map tab to open the Input Map page. a. Click Switch between List, Detail and Schema view in the toolbar until you see the Schema pane. b. Click Add an attribute to the schema in the toolbar. c. Type the name of the new attribute as Maiden Name and click OK. The Maiden Name attribute is displayed in the Schema pane. d. Click Add a new attribute to the Attribute Map in the toolbar. e. Type the name of the new attribute as erTDISblMaidenName, and click OK The erTDISblMaidenName attribute is displayed in the Work Attribute list. f. Click Switch between List, Detail and Schema view in the toolbar until you see the Attribute Map details pane. g. Select the Maiden Name attribute from the Connector Attribute list. h. Select the erTDISblMaidenName check box from the Schema pane to map the erTDISblMaidenName attribute to the siebelJDBConnUsers connector. Note: Perform this step if the attribute is a simple attribute or PicklistBusComponent attribute. To map a MVGBusComponent attribute, you must select the Advance Mapping Settings check box on the Attribute Map details pane. Then write scripts for mapping the MVGBusComponent attribute to the corresponding connector. For example,
24
IBM Security Identity Manager: Siebel JDB Adapter User Guide
erTDISblRelResponsibility is a MVGBusComponent attribute on the Siebel JDB account form and belongs to the User business component. The Siebel JDB Adapter sends data to IBM Security Identity Manager in the format Siebel Administrator0-R9NH. The following script maps the erTDISblRelResponsibility attribute to the siebelJDBConnUsers connector: var attr = conn.getAttribute("Responsibility"); if(attr != null) { var v = new Packages.java.util.Vector(); var entry1 = attr.getValue(0); var mvAttr = entry1.getAttribute("Responsibility"); if(mvAttr != null){ for(var i = 0; i < mvAttr.size(); i=i+1){ var e = mvAttr.getValue(i); v.addElement("" + e.getString("Name") + "" + "" + e.getString("Primary Organization Id")+ ""); } } //var attrNew = work.newAttribute("erTDISblRelResponsibility"); //attrNew.setValues(v); ret.value = v; }
5. Save the changes to the siebelJDBSearch assembly line.
Chapter 5. Customization of the Siebel JDB account form
25
26
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 6. Reconciling new support data attributes The Siebel JDB Adapter supports business components that are specified in the custom XML files. You can customize the adapter to support new business components for new support data attributes.
Before you begin You must define the new support data attributes in a custom XML file. Before adding an attribute to a custom XML file: v Identify the business object and the business component for which you want to create and reconcile new support data attributes. v Identify types of attributes that you want to reconcile. You can use the Siebel Tools application to identify the business object, the business component, and types of attributes. For more information about identifying types of attributes, see Identifying types of business component attributes.
About this task You can add and reconcile the following attributes in the Account business component: v Name v Type v Organization
Procedure 1. Create a custom XML file. For more information, see Creating a custom XML file. 2. Log on to the workstation where the Siebel JDB Adapter is installed. 3. Copy the SiebelJDBProfile.jar file to the \temp directory. 4. Extract the contents of the SiebelJDBProfile.jar file to the \temp directory. Run the command: cd c:\temp jar -xvf SiebelJDBProfile.jar
This command creates the c:\temp\SiebelJDBProfile directory. 5. Add the attributes that are specified in the newly created custom XML file to the schema.dsml file. For more information, see Adding attributes to the schema.dsml file. 6. Add a connector to the siebelJDBSearch assembly line. For more information, see Adding new connector to the siebelJDBSearch assembly line. 7. Go to the IBM Tivoli Directory Integrator installation directory, and run the following command to break the assembly lines. java –classpath jars\ITLMToolkit.jar;jars\miconfig.jar;jars\miserver.jar; jars\mmconfig.jar;jars\diserverapi.jar;jars\log4j-1.2.8.jar;jars\itdiAgentscommon.jar com.ibm.di.utils.IDIConfigHelper "c:\\temp\\SiebelJDBProfile\\ SiebelJDBAdapter.xml" "c:\\temp\\SiebelJDBProfile"
© Copyright IBM Corp. 2012, 2014
27
In this command, c:\temp\SiebelJDBAdapter.xml is the path of the SiebelJDBAdapter.xml file. 8. Add the connection parameter mapping details for the newly added connector to the service.def file. For more information, see Adding connection parameter mapping details to the service.def file. 9. Use the files in the \temp directory to create a JAR file. Run the command: cd c:\temp jar -cvf SiebelJDBProfile.jar SiebelJDBProfile
10. Import the SiebelJDBProfile.jar file to the IBM Security Identity Manager server. For more information about importing the SiebelJDBProfile.jar file, see the Siebel JDB Adapter Installation and Configuration guide. Under "Installing the Siebel JDB Adapter," search for the section "Importing the adapter profile into the IBM Security Identity Manager server." 11. Stop and start the IBM Security Identity Manager server.
Custom XML file In a custom XML file, you can define the business object, the business component, and the attributes of the business component that you want to reconcile. Create the custom XML file in the ADAPTER_SOLDIR\SiebelCustomXMLs\ directory. For example, to create a custom XML file Account.xml, with the following attributes that belongs to the Account business component: v Name (Simple attribute) v Organization (MVGBusComponent attribute) v Type (PicklistBusComponent attribute) Create the Account.xml file, and copy the following information to the file:
Note: When creating a custom xml, strictly follow the rules that are defined in validator.dtd.
Attributes for the schema.dsml file In the schema.dsml file, you can define the IBM Tivoli Directory Integrator names of the attributes that you want to reconcile and the object class for new support data.
28
IBM Security Identity Manager: Siebel JDB Adapter User Guide
For example, the IBM Tivoli Directory Integrator names of the Name, the Type, and the Organization attributes are erTDISblAccountName, erTDISblAcctType, and erTDISblAcctOrgName respectively. The IBM Tivoli Directory Integrator name of the Account object class is erTDISblAccount. Define these attributes in the schema.dsml file as follows: erTDISblAccountName Account Name 1.3.6.1.4.1.6054.3.137.2.66 1.3.6.1.4.1.1466.115.121.1.15 erTDISblAcctOrgName Account Organization Name 1.3.6.1.4.1.6054.3.137.2.67 1.3.6.1.4.1.1466.115.121.1.15 erTDISblAcctType Account 1.3.6.1.4.1.6054.3.137.2.68 1.3.6.1.4.1.1466.115.121.1.15 erTDISblAccount Account class 1.3.6.1.4.1.6054.3.137.1.105/object-identifier>
Adding a connector to the siebelJDBSearch assembly line To reconcile the record of a new business component that is specified in the new custom XML file Account.xml, you must add a connector to the siebelJDBSearch assembly line.
Procedure 1. Run the IBM Tivoli Directory Integrator. 2. Click File > Open. 3. Select the SiebelJDBAdapter.xml file from the temporary folder where the Siebel JDB Adapter profile was extracted, and click Open. 4. In the navigation pane, expand the AssemblyLines tree, and select the siebelJDBSearch assembly line.
Chapter 6. Reconciling new support data attributes
29
5. Right-click the Feeds folder, and select Add connector component to open the Select Connector window. a. From the connector list, select ibmdi.SiebelJDBConnector. b. In the Name field, type a name for the connector, for example, siebelJDBConnAcct. c. From the Mode list, select Iterator. d. Click OK. The Config page opens in the right pane. 6. In the Custom XML File Path field, type the relative path of the Account.xml file. For example, .\SiebelCustomXMLs\Account.xml. 7. Click the Hooks tab. a. Enable the following hooks from the Prolog folder, and copy the script from the corresponding hook of an existing connector: v Before Selection v On Error b. Enable the following hooks from the DataFlow (Iterator) folder, and copy the script from the corresponding hook of an existing connector: v GetNext Successful v Iterator Error 8. Map the newly added attributes to the siebelJDBSearch assembly line. For more information, see “Mapping attributes to the siebelJDBSearch assembly line” on page 23. 9. Save the changes to the siebelJDBSearch assembly line.
Connection parameter mapping details for the service.def file The service.def file is available in the \temp directory where the adapter profile is extracted. In the service.def file, add the following connector parameter mapping details to the definition of the siebelJDBSearch operation:
30
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Chapter 7. Troubleshooting of the Siebel JDB Adapter You can identify and resolve error messages that occur while running the Siebel JDB Adapter by using the ibmdi.log file. Whenever an operation fails, the corresponding error messages are logged in the ibmdi.log file. This file is in the ADAPTER_SOLDIR\logs directory. You can display the logs in the user interface by running the Remote Method Invocation (RMI) Dispatcher from the command prompt. You can configure logging information for the adapter. For more information, see the Siebel JDB Adapter Installation and Configuration guide. Search for the sections "Displaying logs in the user interface" and "Configuring logging for the adapter." The following tables list the error messages and warnings that might occur during the Siebel JDB Adapter user tasks and the suggested actions to resolve them. Note: The error code CTGIMT001E shown in the following table can be issued for multiple reasons. Table 14. Error messages and suggested actions Error code
Error message
Suggested action
CTGIMT001E
The following error occurred.
v Verify that the Siebel server is running.
v Verify that the port specified in connect string can be Error: Error communicating with ™ reached from the IBM Tivoli Directory Integrator Siebel Server using Java Data workstation and that no firewall or other security Beans. Could not open a session in 4 product prevents communication between them. attempts. {1} (SBL-JCA-200) OR Code Page "UTF-8" is not supported. v Verify that the dispatcher JVM is not using the UTF-8 Use "-encoding" option to change code page (which is by default on Linux). The code the file encoding. (SBL-JCA-328) page for JVM can be changed by using the -Dfile.encoding option. CTGIMT001E
The following error occurred. Error: NoClassDefFoundError for class: com.siebel.data.SiebelException
CTGIMT001E
The following error occurred.
Ensure that Siebel.jar and SiebelJI_lang.jar files are placed in the ITDI_HOME/jars/3rdparty/others directory.
Ensure that the correct dispatcher is installed.
Error: [JavaPackage com.ibm.di. utils. SiebelJDBAdapterUtils. Get[LDAP/JDBC]Connector] is not a function. CTGIMT001E
The following error occurred. Error: SBL-SVR-00040: Internal: Informational, encrypted parameter. OR The following error occurred. Error: Siebel authentication error.
CTGIMT001E
The following error occurred.
Verify that the Siebel Administrator name and password are correct.
Verify that the port number is specified in connect string.
Error: null CTGIMT001E
The following error occurred. Error: [error message]
© Copyright IBM Corp. 2012, 2014
Verify that the required parameter specified in the error message is given correctly.
31
Table 14. Error messages and suggested actions (continued) Error code
Error message
Suggested action
CTGIMT003E
The account already exists.
The user exists on the resource. This error might occur if you are attempting to add a user to the managed resource and IBM Security Identity Manager is not synchronized with the resource. To fix this problem, schedule a reconciliation between IBM Security Identity Manager and the resource. See the online help for information about scheduling a reconciliation. For a Siebel server that uses LDAP authentication this error might occur if the Siebel user is not present, but the corresponding LDAP user exists.
CTGIMT009E
The account username cannot be modified because it does not exist.
This error might occur when you attempt to modify a user. This error might also occur if you attempt to change the password for a user. To fix the problem, ensure that: v The location specified for the managed resource is correct. v The user was created on the resource. v The user was not deleted from the resource. v If the user does not exist on the resource, create the user on the resource and then schedule a reconciliation. See the online help for information about scheduling a reconciliation.
CTGIMT015E
An error occurred while deleting the This error might occur when you attempt to delete a user. This error might also occur if you attempt to username account because the change the password for a user. To fix the problem, account does not exist. ensure that: v The location specified for the managed resource is correct. v The user was created on the resource. v The user was not deleted from the resource. v If the user does not exist on the resource, create the user on the resource and then schedule a reconciliation. See the online help for information about scheduling a reconciliation.
CTGIMT211E
The account was not added/modified/deleted due to a system error: An end of file error has occurred. Please continue or ask your systems administrator to check your application configuration if the problem persists.(SBL-DAT-00393).
Verify that the Siebel.jar and SiebelJI_enu.jar files in ITDI_HOME/jars/3rdparty/others directory are copied from the same Siebel server that is used to manage the users.
CTGIMT222W
The account is already suspended.
This error might occur if you attempt to suspend an account that was already suspended.
CTGIMT224W
The account is already restored.
This error might occur if you attempt to restore an account that was already restored.
CTGIMT600E
An error occurred while establishing v Verify that the adapter service is running. communication with the IBM Tivoli v Verify that the URL specified on the service form for Directory Integrator server. IBM Tivoli Directory Integrator is correct.
32
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Appendix A. Adapter attributes The IBM Security Identity Manager server communicates with the Siebel JDB Adapter by using attributes that are included in transmission packets that are sent over a network. The following table lists the attributes that are used by the Siebel JDB Adapter account object class erTDISblJDBAccount and the corresponding counterparts in the User business component on the Siebel server. Table 15. Attributes, descriptions, and corresponding Siebel attributes for erTDISblJDBAccount Attribute name
Description
Required Siebel attribute
erUid
User ID
Yes
Login Name
erPassword
Password for the user ID
No
LDAP auth.: Password and Verify Password DB auth.:
erAccountStatus
Status of the account (suspended/ restored)
No
LDAP auth.: DB auth.:
erTDISblIsEmployee
Type of account No (Employee/Contact user)
Employee Flag
erTDISblFirstName
Given name
Yes
First Name
erTDISblLastName
Surname
Yes
Last Name
erTDISblMiddleName
Middle initial
No
Middle Name
erTDISblJobTitle
Job title
No
Job Title
erTDISblAlias
Alias
No
Alias
erTDISblTZone
Time zone
No
Time Zone
erTDISblWorkPhone
Work telephone number
No
Phone #
erTDISblHomePhone
Home telephone number
No
Home Phone #
erTDISblFaxNo
Fax number
No
Fax #
erTDISblEmail
Email address
No
Email Addr
erTDISblEmpNo
Employee number
No
EMP #
erTDISblCellPhone
Cell telephone number
No
Cell Phone #
erTDISblShortName
Short name
No
Nick Name
erTDISblPagerNo
Pager number
No
Pager Phone #
erTDISblPagerPin
Pager PIN
No
Pager PIN
erTDISblEmergencyNtfy
Emergency notification
No
Emergency Notification
erTDISblStndNotify
Standard notification
No
Standard Notification
© Copyright IBM Corp. 2012, 2014
33
Table 15. Attributes, descriptions, and corresponding Siebel attributes for erTDISblJDBAccount (continued) Attribute name
Description
Required Siebel attribute
erTDISblAvail
Availability
No
Availability Status
erTDISblAvailUntil
Overtime availability
No
Availability Status Until
erTDISblRelPositions
Positions
No
Position
erTDISblRelResponsibility
Responsibilities
No
Responsibility
erTDISblPersonalTitle
Name title (Mr./Mrs.)
No
Personal Title
erTDISblBUnits
Employee organizations
No
Employee Organization
erTDISblPrimBUnit
Primary employee organization
No
Primary Employee Organization
erTDISblPrimPosition
Primary position ID
No
Primary Position
erTDISblLDAPRelResponsibility
Responsibilities in LDAP
No
Responsibility in LDAP (Available for only LDAP authentication.)
erLastAccessDate
Last access date
No
erLastAccessDate
The following table lists the attributes that are used by the Siebel JDB Adapter responsibility support DataObject class erTDISblResponsibility and the corresponding counterparts in the Responsibility business component on the Siebel server. Table 16. Attributes, descriptions, and corresponding Siebel attributes for erTDISblResponsibility Object class attribute
Description
Required Siebel attribute
erTDISblRespName
Name of the responsibility
Yes
Name
erTDISblRespDisplayName Display name on the IBM Security Identity Manager user interface
Yes
Name + Primary Organization ID + Description
erTDISblRespOrgName
Yes
Name + Primary Organization ID
Responsibility name and the primary organization ID it belongs to
The following table lists the attributes that are used by the Siebel JDB Adapter position support DataObject class erTDISblPosition and the corresponding counterparts in the Position business component on the Siebel server. Table 17. Attributes, descriptions, and corresponding Siebel attributes for erTDISblPosition
34
Object class attribute
Description
Required Siebel attribute
erTDISblPostnId
ID of position on resource
Yes
Position ID
erTDISblPostnName
Name of the position
Yes
Name + Division + Position ID + Description
IBM Security Identity Manager: Siebel JDB Adapter User Guide
The following table lists the attributes that are used by the Siebel JDB Adapter time zone support DataObject class erTDISblTZones and the corresponding counterpart in the Time Zone business component on the Siebel server. Table 18. Attribute, description, and corresponding Siebel attribute for erTDISblTZones Object class attribute
Description
Required Siebel attribute
erTDISblTZName
Name of time zone
Yes
Name
The following table lists the attributes that are used by the Siebel JDB Adapter personal title support DataObject class erTDISblTitles and the corresponding counterpart in the List of Values business component on the Siebel server. Table 19. Attribute, description, and corresponding Siebel attribute for erTDISblTitles Object class attribute
Description
Required Siebel attribute
erTDISblTitle
Name of title on resource
Yes
Value
The following table lists the attributes that are used by the Siebel JDB Adapter notification type support DataObject class erTDISblEmpNotify and the corresponding counterpart in the List of Values business component on the Siebel server. Table 20. Attribute, description, and corresponding Siebel attribute for erTDISblEmpNotify Object class attribute
Description
Required Siebel attribute
erTDISblNotifyType
Type of employee notification
Yes
Value
The following table lists the attributes that are used by the Siebel JDB Adapter availability type support DataObject class erTDISblEmpAvail and the corresponding counterpart in the List of Values business component on the Siebel server. Table 21. Attribute, description, and corresponding Siebel attribute for erTDISblEmpAvail Object class attribute
Description
Required Siebel attribute
erTDISblAvailType
Type of employee availability
Yes
Value
The following table lists the attributes that are used by the Siebel JDB Adapter employee organization support DataObject class erTDISblBU and the corresponding counterparts in the Organization business component on the Siebel server. Table 22. Attributes, descriptions, and corresponding Siebel attributes for erTDISblBU Object class attribute
Description
Required Siebel attribute
erTDISblBUnitName
Name of organization
Yes
Name
erTDISblBUnitId
ID of organization
Yes
Organization ID
Appendix A. Adapter attributes
35
36
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Appendix B. Definitions for ITDI_HOME and ISIM_HOME directories ITDI_HOME is the directory where Tivoli Directory Integrator is installed. ISIM_HOME is the directory where IBM Security Identity Manager is installed. ITDI_HOME This directory contains the jars/connectors subdirectory that contains files for the adapters. Windows drive\Program Files\IBM\TDI\ITDI_VERSION
For example the path for version 7.1: C:\Program Files\IBM\TDI\V7.1
UNIX /opt/IBM/TDI/ITDI_VERSION
For example the path for version 7.1: /opt/IBM/TDI/V7.1
ISIM_HOME This directory is the base directory that contains the IBM Security Identity Manager code, configuration, and documentation. Windows path\IBM\isim
UNIX path/IBM/isim
© Copyright IBM Corp. 2012, 2014
37
38
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Appendix C. Support information You have several options to obtain support for IBM products. v “Searching knowledge bases” v “Obtaining a product fix” on page 40 v “Contacting IBM Support” on page 40
Searching knowledge bases You can often find solutions to problems by searching IBM knowledge bases. You can optimize your results by using available resources, support tools, and search methods.
About this task You can find useful information by searching the product documentation for IBM Security Identity Manager. However, sometimes you must look beyond the product documentation to answer your questions or resolve problems.
Procedure To search knowledge bases for information that you need, use one or more of the following approaches: 1. Search for content by using the IBM Support Assistant (ISA). ISA is a no-charge software serviceability workbench that helps you answer questions and resolve problems with IBM software products. You can find instructions for downloading and installing ISA on the ISA website. 2. Find the content that you need by using the IBM Support Portal. The IBM Support Portal is a unified, centralized view of all technical support tools and information for all IBM systems, software, and services. The IBM Support Portal lets you access the IBM electronic support portfolio from one place. You can tailor the pages to focus on the information and resources that you need for problem prevention and faster problem resolution. Familiarize yourself with the IBM Support Portal by viewing the demo videos (https://www.ibm.com/blogs/SPNA/entry/the_ibm_support_portal_videos) about this tool. These videos introduce you to the IBM Support Portal, explore troubleshooting and other resources, and demonstrate how you can tailor the page by moving, adding, and deleting portlets. 3. Search for content about IBM Security Identity Manager by using one of the following additional technical resources: v IBM Security Identity Manager version 6.0 technotes and APARs (problem reports). v IBM Security Identity Manager Support website. v IBM Redbooks®. v IBM support communities (forums and newsgroups). 4. Search for content by using the IBM masthead search. You can use the IBM masthead search by typing your search string into the Search field at the top of any ibm.com® page. 5. Search for content by using any external search engine, such as Google, Yahoo, or Bing. If you use an external search engine, your results are more likely to © Copyright IBM Corp. 2012, 2014
39
include information that is outside the ibm.com domain. However, sometimes you can find useful problem-solving information about IBM products in newsgroups, forums, and blogs that are not on ibm.com. Tip: Include “IBM” and the name of the product in your search if you are looking for information about an IBM product.
Obtaining a product fix A product fix might be available to resolve your problem.
About this task You can get fixes by following these steps:
Procedure 1. Obtain the tools that are required to get the fix. You can obtain product fixes from the Fix Central Site. See http://www.ibm.com/support/fixcentral/. 2. Determine which fix you need. 3. Download the fix. Open the download document and follow the link in the “Download package” section. 4. Apply the fix. Follow the instructions in the “Installation Instructions” section of the download document.
Contacting IBM Support IBM Support assists you with product defects, answers FAQs, and helps users resolve problems with the product.
Before you begin After trying to find your answer or solution by using other self-help options such as technotes, you can contact IBM Support. Before contacting IBM Support, your company or organization must have an active IBM software subscription and support contract, and you must be authorized to submit problems to IBM. For information about the types of available support, see the Support portfolio topic in the “Software Support Handbook”.
Procedure To contact IBM Support about a problem: 1. Define the problem, gather background information, and determine the severity of the problem. For more information, see the Getting IBM support topic in the Software Support Handbook. 2. Gather diagnostic information. 3. Submit the problem to IBM Support in one of the following ways: v Using IBM Support Assistant (ISA): Any data that has been collected can be attached to the service request. Using ISA in this way can expedite the analysis and reduce the time to resolution. a. Download and install the ISA tool from the ISA website. See http://www.ibm.com/software/support/isa/. b. Open ISA.
40
IBM Security Identity Manager: Siebel JDB Adapter User Guide
c. Click Collection and Send Data. d. Click the Service Requests tab. e. Click Open a New Service Request. v Online through the IBM Support Portal: You can open, update, and view all of your service requests from the Service Request portlet on the Service Request page. v By telephone for critical, system down, or severity 1 issues: For the telephone number to call in your region, see the Directory of worldwide contacts web page.
Results If the problem that you submit is for a software defect or for missing or inaccurate documentation, IBM Support creates an Authorized Program Analysis Report (APAR). The APAR describes the problem in detail. Whenever possible, IBM Support provides a workaround that you can implement until the APAR is resolved and a fix is delivered. IBM publishes resolved APARs on the IBM Support website daily, so that other users who experience the same problem can benefit from the same resolution.
Appendix C. Support information
41
42
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Appendix D. Accessibility features for IBM Security Identity Manager Accessibility features help users who have a disability, such as restricted mobility or limited vision, to use information technology products successfully.
Accessibility features The following list includes the major accessibility features in IBM Security Identity Manager. v Support for the Freedom Scientific JAWS screen reader application v Keyboard-only operation v Interfaces that are commonly used by screen readers v Keys that are discernible by touch but do not activate just by touching them v Industry-standard devices for ports and connectors v The attachment of alternative input and output devices The IBM Security Identity Manager library, and its related publications, are accessible.
Keyboard navigation This product uses standard Microsoft Windows navigation keys.
Related accessibility information The following keyboard navigation and accessibility features are available in the form designer: v You can use the tab keys and arrow keys to move between the user interface controls. v You can use the Home, End, Page Up, and Page Down keys for more navigation. v You can launch any applet, such as the form designer applet, in a separate window to enable the Alt+Tab keystroke to toggle between that applet and the web interface, and also to use more screen workspace. To launch the window, click Launch as a separate window. v You can change the appearance of applets such as the form designer by using themes, which provide high contrast color schemes that help users with vision impairments to differentiate between controls.
IBM and accessibility See the IBM Human Ability and Accessibility Center For more information about the commitment that IBM has to accessibility.
© Copyright IBM Corp. 2012, 2014
43
44
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Notices This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY 10504-1785 U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan, Ltd. 19-21, Nihonbashi-Hakozakicho, Chuo-ku Tokyo 103-8510, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law : INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement might not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. © Copyright IBM Corp. 2012, 2014
45
IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation 2Z4A/101 11400 Burnet Road Austin, TX 78758 U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products. All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. COPYRIGHT LICENSE: This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to
46
IBM Security Identity Manager: Siebel JDB Adapter User Guide
IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM's application programming interfaces. Each copy or any portion of these sample programs or any derivative work, must include a copyright notice as follows: If you are viewing this information softcopy, the photographs and color illustrations might not appear. © (your company name) (year). Portions of this code are derived from IBM Corp. Sample Programs. © Copyright IBM Corp. _enter the year or years_. All rights reserved. If you are viewing this information in softcopy form, the photographs and color illustrations might not be displayed.
Trademarks IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at http://www.ibm.com/legal/copytrade.shtml. Adobe, Acrobat, PostScript and all Adobe-based trademarks are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, other countries, or both. IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U.S. Patent and Trademark Office. UNIX is a registered trademark of The Open Group in the United States and other countries. Cell Broadband Engine and Cell/B.E. are trademarks of Sony Computer Entertainment, Inc., in the United States, other countries, or both and is used under license therefrom.
Notices
47
Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates.
Privacy Policy Considerations IBM Software products, including software as a service solutions, ("Software Offerings") may use cookies or other technologies to collect product usage information, to help improve the end user experience, and to tailor interactions with the end user or for other purposes. In many cases, no personally identifiable information is collected by the Software Offerings. Some of our Software Offerings can help enable you to collect personally identifiable information. If this Software Offering uses cookies to collect personally identifiable information, specific information about this offering’s use of cookies is set forth below. This Software Offering does not use cookies or other technologies to collect personally identifiable information. If the configurations deployed for this Software Offering provide you as customer the ability to collect personally identifiable information from end users via cookies and other technologies, you should seek your own legal advice about any laws applicable to such data collection, including any requirements for notice and consent. For more information about the use of various technologies, including cookies, for these purposes, see IBM's Privacy Policy at http://www.ibm.com/privacy and IBM’s Online Privacy Statement at http://www.ibm.com/privacy/details/us/en sections entitled "Cookies, Web Beacons and Other Technologies and Software Products and Software-as-a Service".
48
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Index A
F
R
accessibility viii, 43 account form attribute addition 18 customization 17 adapter attributes 33 features 1 overview 1 troubleshooting errors 31 user account management tasks 11 ADAPTER_SOLDIR 3 add user accounts 12 adding attributes to the account form 18 assembly line icons 20 mapping 20 siebelJDBAdd assembly line 21 siebelJDBModify assembly line 22 siebelJDBSearch assembly line add connectors 29 mapping attributes 24 attribute adding user accounts 13 map 20 reconciling 12 schema.dsml file 29
files custom XML files 5 CustomLabels.properties file schema.dsml file 19
reconciliation MVGBusComponent custom value 8 new support data 27 supporting data 12 user accounts 11
B business component attribute types identification 17
C configuration IBM Security Identity Manager 3 MVGBusComponent 7 view mode 7 view modes 5 connection parameter mapping 30 creating custom XML files 28 custom XML files attribute definitions 17 create 28 specifying view mode values 5 customization, account form 17 CustomLabels.properties file 19
D deleting user accounts
I IBM Software Support viii Support Assistant viii IBM Support Assistant 40 ISA 40 ISIM_HOME definition 37 ITDI_HOME 3 ITDI_HOME definition 37
S schema.dsml file 19 service.def file 30 Siebel JDB Adapter 1 siebelJDBAdd assembly line 21 siebelJDBModify assembly line 22 siebelJDBSearch assembly line 24 support contact information 40 support data reconciliation 12
K knowledge bases
39
T
M mapping attributes 20 modification MVGBusComponent custom value user or employee data 8 MVGBusComponent custom values modification of user or employee data 8 reconciliation for support data 7 reconciliation for user data 8
45
O online publications vii terminology vii operations add 12 change passwords deletion 16 modification 14 reconciliation 11 restoration 16 suspension 16
8
terminology vii training viii troubleshooting adapter errors 31 contacting support 40 getting fixes 40 searching knowledge bases support website viii
39
U user accounts add 12 changing passwords deletion 16 modification 14 reconciliation 11 restoration 16 restoriation 16 suspension 16
N notices
7,
16
V view modes configuring 5 default values 5 definition 5
16
16
P
E education viii errors, troubleshooting
19
31
© Copyright IBM Corp. 2012, 2014
password change of user accounts problem-determination viii publications accessing online vii list of vii
16
49
50
IBM Security Identity Manager: Siebel JDB Adapter User Guide
Printed in USA
SC27-4418-02
