Assign users to virtual organisations?

Question

Hi,
I'm new to IDM and trying to work out how to use it effectively.
I have an LDAP directory with I've made a directory junction to to create virtual organisations mirroring the directory structure.
However, when I import users from resource they all go into the Top organization and do not appear under the virtual organization.
how can I fix this? I read somewhere that the Identity Template is used to assign users to organizations? Assuming I have mapped attributes to mail, ou and ouid is the following Identity template correct?
mail=${mail},ou=${ou},ouid=${ouid},dc=example,dc=comOr am I missing something entirely?
thanks for your help,
Toby.

Answer 1

You need to create a form and assign it to the reconciliation process. In the form, you need waveset.organization set to where you want the user objects placed. By default, waveset.organization is set to just "Top". You can get the DN, parse it into a list and write the xml code to use the list to place each in a different virtual organization.
Start off simple, say create a container called Top:newusers. Take a copy of Empty Form and save it as orgEmpty Form or something. Define a field waveset.organization and just set its value to "Top:newusers". Then in the resource, set the reconciliation form to your new form.
Try this, once you see new ids show up in Top:newusers, you then can enhance the logic to be more sophisticated in placing objects. That is, parse the DN into a list and walk the list for a IDM waveset.organization value.
BTW, a good question to ask prospective IDM so called experts. Of 8 or so, I only met one that new how to do this efficiently.