Scheduled Connector Jobs

EmpowerID has six main jobs that run on a schedule for resource systems. Not all of these apply to all system types, and each can be scheduled per resource system.

1. Inventory - This is a Job hosted by the EmpowerID Worker Role Windows service that claims inventory jobs for resource systems and account stores on a scheduled basis, calling the specific inventory method for that system. For account stores, the inventory process is responsible for populating the attribute inbox and running the initial Person provision process using the same Join and Provision Rule logic used by the Account Inbox One by One or Account Inbox Bulk permanent workflow. The actual implementation of how each system is inventoried is specific to the type of system and the implementation in its connector. This Job is scheduled per resource system or account store.

2. Membership (Group Membership Reconciliation) - This is a job hosted by the EmpowerID Worker Role Windows service that evaluates the current "as is" membership of groups versus the "should be" state of membership, based upon dynamic RBAC assignments of the "Member" Resource Role in EmpowerID. This job is scheduled per resource system or account store.

3. Rights Enforcement (Enforcement) - This is a Job hosted by the EmpowerID Worker Role Windows service that adds or removes native permissions for resources in external systems based upon the current state of RBAC delegations. The actual granting or revoking of rights for external systems can result in calls to other agents in order to complete the action. This Job is scheduled per resource system or account store.

4. Rights Inventory - This is a Job hosted by the EmpowerID Worker Role Windows service that adds or removes native permissions for resources in external systems based upon the current state of RBAC delegations. The actual granting or revoking of rights for external systems can result in calls to other agents in order to complete the action. This Job is scheduled per resource system or account store.

5. Resource Role Reconciliation (Projection) - This is a Job hosted by the EmpowerID Worker Role Windows service that manages the membership of EmpowerID Resource Role groups (RRGs). It determines who should currently be a member of those RRGs and then modifies the membership to match. This job is scheduled per resource system or account store.

6. Deleted Object Detection - This process can be turned on in the Account Store configuration and will trigger an evaluation of all accounts with the target account store ID in the EmpowerID account table to verify if an external account exists in the target system. If it does not find a corresponding account in the target system it will flag the account as deleted in the account table.
   
   

   Open

   

   Server Jobs in the EmpowerID UI

    

   Open

   

   Editing the Resource System for an Account Store shows the Jobs and their schedules