PSD1181 – Global Parameters

Prerequisites

This PhenixID Solution Document (PSD) is written for PhenixID Identity Provisioning (PIP) 5.3.0 or later.

Overview

If you are using the same values in several places and you like to refer to a variable instead of the value then you can use a Global Parameter.

For example. You move PIP configuration between two LDAP directories and they are called test.example.com and prod.example.com. If the LDAP reference is used in several actions you can create a Global Parameter called LDAPRoot instead. When you move from test to prod you only change the value in one place.

There are two types of global parameters:

• Standard. This are parameters in code where you can change the default value to you liking.
• Custom. It is like the example above where you create your own parameter that you use in different places.

Configure global parameters

Open Global Parameter dialog box

1. Click Tools
2. Click Global Parameters

Add a standard Global Parameter

1. Click Add
2. Make sure Use Standard: radio button is selected
3. Select in drop down list the parameter to add
4. Add a value
5. Click OK

Add a custom Global Parameter

1. Click Add
2. Make sure Create Custom: radio button is selected
3. Add a name for the parameter
4. Add a value for the parameter
5. Click OK

Delete a Global Parameter

1. Select one or several parameters
2. Click Remove
3. Click OK

Change a Global Parameter

1. Select a parameter
2. Click Edit
3. Update the parameter
4. Click OK

Export/import global parameter

When you export an action or a policy, global parameters will not be included. You need to export and import them separately.

Export global parameter

1. Select one or several parameter
2. Click Export
3. Add a name of the file and click Save
4. Click OK

Import global parameter

1. Click Import
2. Select file
3. Click Import Objects
4. Edit the parameter value if needed

Use global parameter

This section explain how to reference to a global parameter.

Let say that you have a global parameter called LDAPRoot with a value test.example.com and you like to reference to this parameter in an action for example.
LDAPRoot=DC=test,DC=example,DC=com

To reference to LDAPRoot in an action or policy for example you type GLOBAL(LDAPRoot) instead of DC=test,DC=example,DC=com

Three different ways configure the same thing depending on parameters:
* cn=Kalle,OU=PSD1176,DC=test,DC=example,DC=com
* cn=Kalle,OU=PSD1176,GLOBAL(LDAPRoot)
* SESSION(cn),OU=PSD1176,GLOBAL(LDAPRoot)