OIM 11G UserManager Service or Trusted Recon

Question

Hi All,
with everything changing in the world with 11g is the new UserManager server the better way to create new users or is the trusted recon the more correct way to go?
Thanx
Fred

Answer 1

With 11G User Manager Service is just a new representation of the API for user management. So even with 10G you had an option of using tcUserOperationsIntf instead of tcReconciliationOperationsIntf. Anyway it depends on the following:
- Do you need to keep a track of all the users created in OIM via Reconciliation Events for reference in future
- Do you need this Reconciliation Events Data for actual verification that the user was created from your Trusted Source
- Let's say if you use User Manager service for methods like create(User user) then you cannot differentiate later that the user was manually created or using a scheduler reading from a falt file feed. The only check point then would be to verify this user in the Trusted Source/Flat File
- Using API directly for managing users is definitely faster then using Reconciliation API's but most of the folks use Trusted Recon
- You also have the liberty to verify that which attributes were provided from Recon and if there are any missing attributes for any user from Reconciliation Event Manager which would not be handy in case of using User Manager API directly, so you have to keep an eye on the logs for that
Thanks
SRS