Identity Manager 4.0.1 Driver for Scripting Implementation ... - NetIQ

To publish or subscribe to additional attributes, you must add them to the filter and add support for
them into the scripts. Topics in this section include
• Section 5.4.1, “Modifying the Filter,” on page 45
• Section 5.4.2, “Modifying the Scripts for New Attributes,” on page 45
5.4.1 Modifying the Filter
1 On the iManager Driver Overview page for the driver, click the Filter icon on either the
Publisher or Subscriber channel. It is the same object.
2 In the Filter Edit dialog box, click the class containing the attribute to be added.
3 Click Add Attribute, then select the attribute from the list.
4 Select the flow of this attribute for the Publisher and Subscriber channels.
• Synchronize: Changes to this object are reported and automatically synchronized.
• Ignore: Changes to this object are not reported and not automatically synchronized.
• Notify: Changes to this object are reported, but not automatically synchronized.
• Reset: Resets the object value to the value specified by the opposite channel. (You can set
this value on either the Publisher or Subscriber channel, but not both.)
5 Click Apply.
6 If you want to map this attribute to an existing attribute in the connected system’s schema,
modify the Schema Mapping policy for the driver.
For complete details about managing filters and Schema Mapping policies, see Policies in the
iManager for Identity Manager Guide.
5.4.2 Modifying the Scripts for New Attributes
In the Subscriber channel, scripts are called to take the appropriate action for each type of event. You
will need to modify the appropriate scripts to read the values from the new attributes.
Publishing additional attributes requires that you act on changes made in the connected system
application. In addition, the schema.def file should be updated with the additional attributes (see
Section 5.2, “The Connected System Schema File,” on page 38).
5.5 UNIX Shell Developer Guide
The Scripting driver provides a complete Shell script API for interacting with identity management
systems whose tools (including APIs) are available on Linux and UNIX. The Identity Vault and
Identity Manager can run on any supported operating system. Identity Manager communicates with
the driver on a different system over an encrypted network connection.
Before beginning script development, review the preceding topics in this section for information on
defining what data will be synchronized between identity management systems.
With additional development work, the driver can also be customized to support any scripting
language that supports command-line operation.
Customizing the Scripting Driver 45