Document version (last updated) : 2021, April 6th.

Prerequisite

• PhenixID Identity Manager (IM) 5.6.0 or later
• PhenixID Identity Provisioning (PIP) 5.3.0 or later
• NOTE: For a better understanding of how PIP and PIP communicate using REST Web Service can be read in PSD1062.
• Active Directory

Overview

The main focus for this use case are two things:

• Manage mandatory attributes in a PIM form using PIP
• Verify the uniqueness of an attributes in a PIM form.

Configuration

This PSD includes configuration so you can set this up in your own environment. First you need to download a ZIP file that contains a number of files. Open the different files and update them to map your environment, e.g change to your Active Directory name.

Use Cases

Overview PIP manage mandatory attributes

When creating a new object you can specify different attribute to be mandatory. If you like to manage this using PIP, this use case will explain that..

Overview PIP verify the uniqueness

When creating a new object, often there are some attributes that needs to be unique. In this use case we use Social Security Number (SSN) as an example to verify both length, uniqueness and correct syntax.

1. Download and extract configuration ZIP

Download the PSD1174.zip file.
Extract the zip-file.

2. PIM files

2.1 – Add PIM files and folders

1. Add the /UC – PSD1174 – Create User with unique SSN folder from the zip-file to the /role folder to your PIM installation.
   1. Open DSEditor.properties
   2. Change below parameters to map your environment:
      BASEDN=DC=demo,DC=phenixid,DC=net
      filter.PIPFilter.URL=http://127.0.0.1:8085
   3. Save file and restart PhenixID Identity Manager service

2.2 – Change configuration in PIM file

1. Open Create User With Unique SSN.xml file
2. Find VirtualViewBaseDNs parameter (line 25) and change value to map an OU in your environment.

3. PIP files

3.1 – Import PSD1174_Unique_Mandatory.aax

1. Open the Identity Provisioning Configurator
2. Click File -> Import Objects
3. In the extracted ZIP you downloaded, open /PSD1174_Unique_Mandatory folder and then the /PIP_files folder
4. Choose PSD1174_Unique_Mandatory.aax
5. Click Import Objects
6. When imported it should look below. verify that Data source AD-DEMO matches your environment and connection works ok.
7. Save the PIP configuration

3.2 – Change data source to map your Active Directory

1. Open PIP configurator
2. Expand Data Sources -> LDAP and click LDAP PIM-UC
3. Change configuration to map you environment

3.3 – Create Global parameter for where the Root of your AD

1. Open PIP configurator
2. Click Tools and Global Parameters
3. Add one custom parameter for the root of your LDAP/AD.
   1. LDAPRoot – e.g. DC=company,DC=local
   2. Click OK
   3. Save PIP configuration

3.4 – Create and OU in Active Directory called PSD1174 under LDAPRoot
E.g. OU=PSD1174,DC=company,DC=local