Difference between Targeted vs. Trusted source reconciliation?

Question

Hello!
Can someone please explain to me in a “for dummies sort of way” or “by example” what is the difference between
Trusted source reconciliation and Targeted resource reconciliation??
I found this explanation on Oracle, but I still don't understand the difference:
Targeted resource reconciliation:
occurs when the audit criteria reconciles the resource request or change against the actual resource provisioned insuring access or the lack thereof in a ad hoc query bases.
Trusted source reconciliation:
occurs when the audit criteria reconciles from a primary point of truth validating the resource access status against corporate policy.
Thank you very much

Answer 1

Trusted Source:
Trusted sources are identified as your source of truth for employee information. It is a store of user information that hopefully will contain your entire employee list. The best example would be payroll. The information from payroll should be accurate for all employees, and also contain personal data that might be required. Your trusted source will map to a single user identity in OIM, which is the Xellerate User. When you perform a trusted reconciliation against this target, it will create your Xellerate User object for each user which is the unique identity within OIM. Also, when performing reconciliations against a trusted source, this is the only time a reconciliation event triggers an update to a field. You can propogate changes from a trusted reconciliation onto your targets by creating triggers.
Target Reconciliation:
Now that you have your unique identity, this Xellerate User can have user accounts that the end user will actually use. They can have multiple targets linked to their trusted profile (Xellerate User). So when you perform a target recon, it will match that target entity to the Xellerate User identity creating a 1 to many relationship. For every 1 Xellerate User object, you can have multiple target objects, but not the other way around. When you perform the target reconciliation for updates, there are no triggered changes to the process form. It is all an immediate change and you cannot have a trigger on these fields, wheras the trusted source will trigger a change that can be propagated to the targets.
So you can think of it as Trusted is an identity or person, and Target is a user account or object that is actually used by the identity.
-Kevin