Connecting to Ultipro
The EmpowerID UltiPro connector allows organizations to bring the user data in their UltiPro system to EmpowerID, where it can be managed and synchronized with data in any connected back-end user directories. This topic demonstrates how to create the connector in EmpowerID.
Prerequisites: In order to connect EmpowerID to UltiPro, you must have an UltiPro account that is configured to interface with external systems. This means that you must have the following (provided by UltiPro):
- Username
- Password
- User Access Key
- Client Access Key
These values are used to authenticate EmpowerID to UltiPro. In addition, you must create a report as a Web service that specifies the fields you want to expose and then provide EmpowerID with the path to that service.
Additionally, you will need to create a report and expose it as a service. The report needs to have the below fields. Fields designated as required indicate that a value must be provided.
1 | Last Name | Yes |
2 | Middle Name | No |
3 | First Name | Yes |
3 | First Name | Yes |
4 | Preferred First Name | No |
5 | Location | No |
6 | Phone Number | No |
7 | Email Address | No |
8 | Mobile Phone | No |
9 | Job Title | No |
10 | Department Name | No |
11 | Company | No |
12 | Manager Name | No |
13 | Manager ID | No *Required if Manager Name is provided |
14 | Employee ID | No*Unique for each employee |
15 | Windows Login | No |
16 | Sales ID | No |
16 | Sales ID | No |
17 | Manager Flag | Yes*Yes for manager; No for non-manager |
18 | Employee Status | Yes*Active, Terminated |
19 | Employee Type | No |
20 | Sales Force | No |
21 | Date Of Birth | No |
22 | Division | No |
23 | Business Unit | No |
24 | Department Summary | No |
25 | Hire Date | No |
To connect EmpowerID to UltiPro
- Log in to the EmpowerID Management Console as an administrator.
- From the EmpowerID Management Console, click the EmpowerID icon, and select Configuration Manager from the menu.
- In Configuration Manager, expand the User Directories node in the navigation tree, and then click Account Stores.
- Click the Add New button above the grid.
- In the Add New Security Boundary window that opens, select the UltiPro Security Boundary type from the drop-down list and then click OK.
- In the Account Store Details window that appears, do the following:
- Type a name for the connector in the Name field.
- Type the Client Access Key in the Client Key field.
- Type the User Access Key in the User Key field.
- Type the path to the report in the ReportPath field.
- Click Save.
- Enter your UltiPro credentials in the UltiPro Credentials window and then click OK to close the window.
- Click the Resource Systems node and locate the UltiPro resource system that EmpowerID created for the account store.
- Double-click the record or right-click it and select Edit from the context menu.
The Account Store Details screen contains two main panes—a General pane and an Inventory pane—each with settings for configuring a different aspect of the Ultipro account store you just created. To view reference information about a particular pane, expand the drop-down for that pane.
Before configuring EmpowerID to manage the account store, you should determine whether or not you want EmpowerID to provision Person objects from the user records it discovers in the account store. If so, then you should be able to answer the following questions before turning on inventory.
- When do you want EmpowerID to provision Person objects for those user accounts? At inventory or at a later point in time?
- If inventory provisioning is desired, in what Business Role and Location should those Person objects be placed?
- How many user accounts can one Person have in the account store?
- If people can have more that one user account in the account store, do you want EmpowerID to attempt to automatically join any user accounts meeting the conditions of your Join rules to an existing Person during inventory?
- Do you want attribute flow to occur between EmpowerID and the account store? If so, what rules do you want to apply?
For a greater discussion of these points within the context of connecting EmpowerID to an account store, seeConnecting EmpowerID to Active Directory.
From the
General pane of the Account Store Details screen, do the following:
- Optionally, click the Edit Image Removed Image Added button to the right of Business Role Priority and specify the priority for the account store when determining the Business Role of the people.
- Click the Edit Image Removed Image Added button to the right of Maximum Accounts Per Person and specify the maximum number of accounts from the domain that a Person can have linked to them. Setting this prevents the possibility of a runaway error caused by a wrongly configured Join rule.
- Toggle Allow Person Provisioning to reflect your policy for the account store (red sphere for disable and green checkbox for enable). If enabled, EmpowerID provisions a Person object for each user discovered in the account store.
- Toggle Enable Attribute Flow to reflect your policy for the account store (red sphere for disable and green checkbox for enable). When enabled, changes occurring to user attributes in the account store will occur in EmpowerID and vice-versa depending on how you have set up your attribute flow rules. The default flow for most user attributes for active directory is bi-directional. You can change these as needed.
From the
Inventory pane of the Account Store Details screen, do the following: Toggle
Allow Automatic Person Provision On Inventory to reflect your policy for the account store (red sphere for disable and green checkbox for enable). When enabled (and
Allow Person Provisioning is enabled for the account store), EmpowerID will provision Person objects for all new accounts discovered during inventory in real-time, if they meet the conditions of your Provision rules.
When provisioning people during inventory, you have the following options that can be set:
- Business Role for New Inventory Provision - This allows you to select an EmpowerID Business Role for all Persons provisioned during inventory. By default, EmpowerID assigns these people to the Temporary Business Role; however, you can pick others by clicking the Edit Image Removed Image Added button to the right of the line and selecting the desired Business Role from theBusiness Role Selector window that appears. If you pick another and wish to remove it in favor of the default, you can do so by clicking on the red sphere to the right of the Edit button.
- Location for New Inventory Provision - This allows you to select the location that is to be the primary location for the each Person provisioned during inventory.
Toggle
Allow Automatic Person Join On Inventory to reflect your policy for the account store (red sphere for disable and green checkbox for enable). When enabled (and
Allow Person Provisioning is enabled for the account store), EmpowerID will attempt to join any new accounts discovered during inventory if it finds one that matches the conditions of the Join rules for the account store. If this setting is not enabled, EmpowerID will not join secondary accounts to an EmpowerID Person, but will instead provision new EmpowerID Persons for each of those additional accounts. The last action to perform on this screen is to enable inventory. However, before doing so, it is important to review the
attribute flow rules for the account store. Once you are satisfied with the rules, turn on inventory by toggling the button th the left of the line from a red sphere to a green check.
- Related Topics
Concepts:
Anchor |
---|
| administrative-procedures |
---|
| administrative-procedures |
---|
|
Administrative Procedures: