Administration Guide › Managed Endpoint Accounts › How to Configure an Endpoint in CA Identity Manager › Explore and Correlate an Endpoint

Explore and Correlate an Endpoint

In the User Console, you can define an explore and correlate definition. Then, you use this definition with the Execute Explore and Correlate task.

This operation has three results:

• When you explore an endpoint, CA Identity Manager finds the objects in the endpoint and stores instances of them in the provisioning directory.
• When you correlate accounts on an endpoint, CA Identity Manager associates each account with a user in the provisioning directory. For the correlate function, you can determine if the accounts are assigned to the default user or if new users are created.
• You can also set the selected user attributes using the account's attribute values that you select.

To create an explore and correlate definition

1. In an Identity Manager environment, click Endpoints, Explore and Correlate Definitions, Create Explore and Correlate Definition.
2. Click Okay to start a new definition.
3. Complete the Explore and Correlate Tab as follows:
   1. Fill in Explore and Correlate name with any meaningful name.

      Click Select Container/Endpoint/Explore Method to click an endpoint to explore and one or more containers if it has containers. A container search may take a little while for a large endpoint. Use the search filter to narrow the search. Click an explore method for the container. The explore and correlate process includes containers you select and its sub-containers. For a directory container, it includes all the containers in the sub-tree.

   2. Click the Explore/Correlate Actions to perform:
      • Explore directory for managed objects—Finds objects that are stored on the endpoint and not in the provisioning directory.
      • Correlate accounts to users—Correlates the objects that were found in the explore function with users in the provisioning directory. If the user is found, the object is correlated with the user. However, you can instead select that you want to assign the account to the existing user (the default user) or create the user.
      • Update user fields—If a mapping exists between the object fields and the user fields, the user fields are updated with data from the objects fields.
4. Click Submit.

To use an explore and correlate definition

1. In an Identity Manager environment, click Endpoints, Execute Explore and Correlate.
2. Select Execute now to run explore and correlate immediately, or select Schedule new job to run explore and correlate at a later time or on a recurring schedule.

   Note: This operation requires the client browser to be in the same time zone as the server. For example, if the client time is 10:00 PM on Tuesday when the server time is 7:00 AM, the Explore and Correlate definition will not work.

3. Click an explore and correlate definition to execute.
4. Click Submit.

The user accounts that exist on the endpoint are created or updated in CA Identity Manager based on the explore and correlate definition you created.

To verify explore and correlate succeeded

1. Go to System, View Submitted Tasks.
2. Complete the task name field as follows: Execute Explore And Correlate
3. Click Search.

The results show if the task completed successfully.