Target Recon does not link accounts with OIM user

Question

Hi all,
We have developed a custom connector (provisioning and reconciliation connector) to integrate a custom LDAP server.
It is not a trusted source, so, we are performing a target reconciliation.
We have OIM populated with all the users (by a bulk load from a HR resource). Then, when we integrate the LDAP server resource, in the first time reconciliation, we expect that OIM will link LDAP accounts with OIM users, using OIM User ID and LDAP uid attribute for matching.
Our reconciliation connector creates reconciliation events ok, but we always get "not match found" as reconciliation event status.
In the Process Definition we have configured "User ID" as key field, mathed with "User ID" Field of the Resource Object, and uid LDAP attribute.
We have defined all the reconciliation fields in the Resource Objetc.
Why OIM is not matching resource account with OIM users, creating a resource (provisioned resource) for each OIM user?
It seems that OIM is trying to match reconciliation events against already provisioned resources for users, and not against OIM users.
Any ideas?

Answer 1

Hi,
After running bulk loading from the HR resource, all your target Users will get created at OIM. Now if you try to run Target Resource Reconciliation against that LDAP targetfor these records, the first thing OIM will do is to execute the reconciliation rule. After successful matching of this rule OIM will see for Process matching. So try this out after defining a reconciliation rule for your Resource Object with the following rule element values.
User Profile Data - User Login
Operator - Equals
Attribute - uid LDAP attribute *(Primary Field at the target Or the filed against which you want the matching at OIM)*
Transform - None
Object should be Your RO + Rule should be Valid and Active
After this matching you need to have the Reconciliation Action rules in place as well. Check that the following two rules exist:
Go to Resource Object -> Object Reconciliation -> Reconciliation Action Rules
1) One Entity match Found - Establish link \\\\\ *(must for your case)* \\\\\
2) One Process Match Found - Establish link
If not create the rules and Try then.
Regards
Edited by: rajsunny on Jan 27, 2009 4:20 AM