Reconciliation does not provision??

Question

According to what I have read from a doc:
Reconciliation only updates Identity Manager
users and the account index; it does not fetch or
provision other resource accounts for
performance reasons.
I don't quite get it. If I have an authoritative resource A, and I have a manage resource B. During the reconciliation, if user1 is detected in resource A, and that that user1 does not exist in resource B, I surely want reconciliation to create a user1 in resource B for me, apart from creation in Lighthouse.
I thought IDM is a provisioning application, why does it not provision in the above case?
And what should I do to overcome the problem above?

Answer 1

There is a way to solve your problem.
You have to modify the user form you use to have as default value for the assigned resources - roles the resources - roles you want to assign the user, in order to make the provision.
Create a demo administrator and attach that form to the demo administrator in order to be able to test the form.
Then you have two options, either you can use the load from resource method and then you have first to specify to use the form you just modified and then the "Update Accounts" checkbox to be checked and it will work for you fine.
/the second way to do automatic provision is vi reconciliation but you have to modify the reconciliation policy ( general or resource specific it depentds from your needs ) to use as proxy user the administrator you just created, then your forms will be used and again the automatic provision will be fine.
For more details on how to modify - create forms you can read the apropriate documentation.