...
Object in Salesforce | Component in EmpowerID |
---|---|
User | Account |
Profile | Group (Group Type ID = 15) |
User Role | Group (Group Type ID = 16) |
Permission Set | Group (Group Type ID = 25) |
Public Groups | Group (Group Type ID = 9) |
Permission Set License | Group (Group Type ID = 41) |
User License | Group License |
Permission Set Assignment | Group Account |
...
Section macro | ||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Users in Salesforce are inventoried as accounts in EmpowerID and added as records to the Account
table of the EmpowerID Identity and Resource Warehouse. The connector supports both full and incremental inventory for accounts. Each time full inventory runs, the connector syncs all the accounts from the external system to EmpowerID. Full Inventory uses a query to get all the accounts from Salesforce. The query contains a comma separated list of user attributes to be inventoried and is configurable by editing the UserQueryMessage
parameter on the Salesforce SCIM resource system. The below code depicts what the default query looks like.
Code Block | ||
---|---|---|
| ||
Select ID,LastModifiedDate,Username,LastName,FirstName,Name,CompanyName,Department,Title,Street,City,State,PostalCode,Country, Address,Email,Phone,Alias,CommunityNickname,IsActive,TimeZoneSidKey,LocaleSidKey,EmailEncodingKey,ProfileId,UserRoleId,LanguageLocaleKey, ManagerId,LastLoginDate,LastPasswordChangeDate,CreatedDate,UserPermissionsMarketingUser,UserPermissionsOfflineUser,UserPermissionsCallCenterAutoLogin, DefaultGroupNotificationFrequency,UserPermissionsKnowledgeUser,UserPermissionsLiveAgentUser,UserPermissionsSupportUser from User |
Incremental inventory uses the LastModifiedDate
attribute to bring only the accounts modified after the last inventory run. Any updates made to the user on the external system will be synced to EmpowerID account.
Easy html macro | |||
---|---|---|---|
theme | {"label":"solarized_dark","value":"solarized_dark"} | contentByMode | {"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<link href=\"https://docs.empowerid.com/assets/css/EID-API-DOC.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n \r\n <div class = \"bd-callout bd-callout-info\">\r\nThe <code>id</code >|
Info | |||
The | synched synced to the | <code>systemIdentifier</code>\r\ncolumn | </div>","javascript":"","css":""}
Inventoried Account Attributes
...
Attributes in Salesforce | SCIM Attributes | Attributes in EmpowerID |
---|---|---|
Country | country | Country |
PostalCode | addresses[?(@.type=='work')].postalCode | ZipCode |
Street | addresses[?(@.type=='work')].streetAddress | StreetAddress |
emails[?(@.type=='work')].value | ||
FirstName LastName | displayName | FriendlyName |
Alias | Alias | Alias |
City | city | City |
State | state | State |
LastName | name.familyName | LastName |
FirstName | name.givenName | FirstName |
Phone | phoneNumbers[?(@.type=='Phone')].value | Telephone |
Department | urn:ietf:params:scim:schemas:extension:enterprise:2.0:User.department | Department |
Username | userName | LogonName |
ManagerId | ['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User'].['manager'].['value'] | ManagerDistinguishedName |
CompanyName | companyName | Company |
CommunityNickname | CommunityNickname | DisplayNamePrintable |
LanguageLocaleKey | LanguageLocaleKey | PreferredLanguage |
LocaleSidKey | LocaleSidKey | Location |
ProfileId | ProfileId | ProfilePath |
EmailEncodingKey | EmailEncodingKey | ExtensionAttribute4 |
TimeZoneSidKey | TimeZoneSidKey | ExtensionAttribute3 |
DefaultGroupNotificationFrequency | DefaultGroupNotificationFrequency | ExtensionAttribute5 |
UserPermissionsCallCenterAutoLogin | UserPermissionsCallCenterAutoLogin | ExtensionAttribute21 |
UserPermissionsMarketingUser | UserPermissionsMarketingUser | ExtensionAttribute19 |
UserPermissionsOfflineUser | UserPermissionsOfflineUser | ExtensionAttribute20 |
UserRoleId | UserRoleId | ExtensionAttribute14 |
Title | Title | JobTitle |
AccountId | AccountId | ExtensionAttribute2 |
UserPermissionsSupportUser | UserPermissionsSupportUser | CustomAttribute17 |
UserPermissionsLiveAgentUser | UserPermissionsLiveAgentUser | CustomAttribute18 |
UserPermissionsKnowledgeUser | UserPermissionsKnowledgeUser | CustomAttribute19 |
IsActive | IsActive | Active |
...
Section macro | ||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Groups in Salesforce are inventoried as groups and added as records to the Group
table of the EmpowerID Identity and Resource Warehouse. Group members are added as records to the GroupAccount
table. The connector supports both full and incremental inventory for groups, whereas inventory for group memberships is always a complete inventory. Each time full inventory runs, the connector syncs all groups and group memberships from the external system to EmpowerID.
Full inventory uses separate queries to retrieve groups and group memberships from Salesforce. Each query contains a comma separated list of attributes to be inventoried that can be customized by editing the associated query parameter on the Salesforce SCIM resource system.
Easy html macro | |||
---|---|---|---|
theme | {"label":"solarized_dark","value":"solarized_dark"} | contentByMode | {"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<link href=\"https://docs.empowerid.com/assets/css/EID-API-DOC.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n \r\n <div class = \"bd-callout bd-callout-info\">Profile|
Info | |||
Profile and UserRole assignments are stored as user attributes in Salesforce and | \r\nas as such are inventoried | with in EmpowerID during user inventory. The assignments are stored in the Group table. | </div>","javascript":"","css":""}
Query parameters include the following:
Group Type | Query Parameter | Default Query Value | |||||
---|---|---|---|---|---|---|---|
Profile | ProfileQueryMessage |
| |||||
UserRole | UserRoleQueryMessage |
| |||||
PermissionSet | PermissionSetQueryMessage |
| |||||
PublicGroup | PublicGroupQueryMessage |
|
Incremental inventory uses the LastModifiedDate
attribute to bring only the groups modified after the last inventory run. Any updates made on the external system will be synced to EmpowerID Group. If a group is disabled on the external system and the CheckForDeletedObjectsEnabled
setting for the Salesforce SCIM account store is turned on, EmpowerID marks the group as deleted and sets the deleted date on the group.
Easy html macro | |||
---|---|---|---|
theme | {"label":"solarized_dark","value":"solarized_dark"} | contentByMode | {"html":"<!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<link href=\"https://docs.empowerid.com/assets/css/EID-API-DOC.css\" rel=\"stylesheet\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n \r\n <div class = \"bd-callout bd-callout-info\">\r\nThe <code>id</code >|
Info | |||
The | synched synced to the | <code>systemIdentifier</code>\r\ncolumn | </div>","javascript":"","css":""}
Inventoried Group Attributes
...
Attributes in Salesforce | SCIM Attributes | Attributes in EmpowerID |
---|---|---|
id | id | SystemIdentifier |
Name | Name | Name |
Name | displayName | FriendlyName |
...
Section macro | ||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
User licenses in Salesforce are inventoried and added as records to the GroupLicense
table of the EmpowerID Identity and Resource Warehouse. The connector supports both full and incremental inventory for user licenses. Each time full inventory runs, the connector syncs all user licenses from the external system to EmpowerID. Full Inventory uses a query to get all the user licenses from Salesforce. The query contains a comma separated list of user license attributes to be inventoried that can be configured by editing the UserLicenseQueryMessage
parameter on the Salesforce SCIM resource system. The below code depicts what the default query looks like.
Code Block | ||
---|---|---|
| ||
Select ID,LastModifiedDate,Name,TotalLicenses,UsedLicenses from UserLicense |
Incremental inventory uses the LastModifiedDate
attribute to bring only the user licenses modified after the last inventory run. Any updates made to the user on the external system will be synced to the EmpowerID Group License.
...
.
...
Macrosuite divider macro | ||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...