...
| import | https://docs.empowerid.com/docs.css |
|---|
When you connect EmpowerID to a user directory or other identity-aware application and turn on inventory, EmpowerID evaluates the accounts in those directories to determine whether EmpowerID People should be provisioned from those accounts. The logic that determines this is specified by the Join and Provision Rules, as well as the Join and Provision Filters in the Identity Warehouse. Thus, before turning on inventory, you should review these and adjust them as needed. This article shows you how.
...
How to review the Join and Provision rules for your environment
...
On the
...
navbar, expand Identity Lifecycle, and clickÂ
...
Settings
...
.
These Join rules work in conjunction with the Join and Provision filters to specify the conditions that must be met for EmpowerID to join newly discovered user accounts to an EmpowerID Person. The default logic of these Join Rules is to join an inventoried user account to an EmpowerID Person if the account store allows for Person joining and the applicable attributes on the user account match the corresponding attributes on an existing EmpowerID Person. For example, the above highlighted Join rule instructs EmpowerID to attempt to join newly discovered accounts to people if the Birth Date, First Name and Last Name attributes match.
In addition to the above rule, EmpowerID includes the following Join Rules:
- AccountInboxJoinByCustomMatch - This an empty rule that you can use to customize the attribute matches required to join an inventoried user account to an EmpowerID Person.
- AccountInboxJoinByEmailFirstNameLastName - This rule instructs EmpowerID to attempt to join newly discovered accounts to people if the Email, First Name and Last Name attributes on a given user account match that of an existing EmpoweID Person.
- AccountInboxJoinByEmployeeIDFirstNameLastName - This rule instructs EmpowerID to attempt to join newly discovered accounts to people if the EmployeeID, First Name and Last Name attributes on a given user account match that of an existing EmpoweID Person.
- AccountInboxJoinByPersonalEmailFirstNameLastName - This rule instructs EmpowerID to attempt to join newly discovered accounts to people if the PersonalEmail, First Name and Last Name attributes on a given user account match that of an existing EmpoweID Person.
By default, each of the above Join rules are enabled (except for the Custom Join rule). You can disable any of these rules from the EmpowerID System Settings page by doing the following:
...
To review the Join and Provision filters for your environment
...
In our example, we edited the JoinAndProvisionFilter to specify that in addition to the default conditions, user accounts must also have an Employee Type of Permanent.
...
This directs you to the Account Inbox Settings page, which contains settings that determine how EmpowerID should handle Joiner and Leaver processes in your environment. A description of the settings follows the image.
Insert excerpt IL:Account Inbox Settings IL:Account Inbox Settings nopanel true Make any changes to the default settings as needed and then click Save.
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|