CA IdentityMinder can automatically synchronize user accounts with identity policies at different points during a task’s lifecycle.
A CA IdentityMinder task generates events, detectable activities that occur during task processing. For example, the default Create User task generates the CreateUserEvent, AddUserToGroupEvent, and the AssignAccessRoleEvent. You can configure CA IdentityMinder to synchronize users after a task completes, or when each event completes.
Note: The section Synchronize Users with Identity Policies provides more information on the user synchronization process.
To configure a task to trigger user synchronization
CA IdentityMinder displays a search screen.
Note: If you select the On Task Completion option for a task that includes multiple events, CA IdentityMinder does not synchronize users until all of the events in the task complete. If one or more of those events require workflow approval, this may take several days. To prevent CA IdentityMinder from waiting to apply identity policies until all events complete, select the On Every Event option.
For tasks with a primary and secondary event for the same user, setting user synchronization to On Every Event may result in more evaluations for which policies apply to a user than if the On Task Completion option is selected.
|Copyright © 2012 CA. All rights reserved.||