Administration Guide › Managed Endpoint Accounts › How to Configure an Endpoint in CA Identity Manager › Explore and Correlate an Endpoint

Explore and Correlate an Endpoint

To add users that exist in an endpoint, you define an explore and correlate definition for that endpoint. Then, you use this definition with the Execute Explore and Correlate task.

This operation has three results:

• When you explore an endpoint, CA Identity Manager finds the objects in the endpoint and stores instances of them in the provisioning directory.
• When you correlate accounts on an endpoint, CA Identity Manager associates each account with a user in the provisioning directory. For the correlate function, you can determine if the accounts are assigned to the default user or if new users are created.
• You can also set the selected user attributes using the account's attribute values that you select.

To create an explore and correlate definition

1. In an environment, click Endpoints, Explore and Correlate Definitions, Create Explore and Correlate Definition.
2. Click Okay to start a new definition.
3. Complete the Explore and Correlate Tab as follows:
4. Fill in Explore and Correlate name with any meaningful name.

   Click Select Container/Endpoint/Explore Method to click an endpoint to explore and one or more containers if it has containers. A container search may take a little while for a large endpoint. Use the search filter to narrow the search. Click an explore method for the container. The explore and correlate process includes containers you select and its sub-containers. For a directory container, it includes all the containers in the sub-tree.

   Click the Explore/Correlate Actions to perform:

   • Explore directory for managed objects—Finds objects that are stored on the endpoint and not in the provisioning directory.
   • Correlate accounts to users—Correlates the objects that were found in the explore function with users in the provisioning directory. Two choices of correlation exist.
     • User existing users

       Use this choice for a correlation-matching algorithm that matches each account with a previously created user.

       If the user is found, the account is correlated with that user. If multiple users are found, the account is correlated with the default user. If no user is found, this option creates the user (if all mandatory attributes are known) and correlates the account with that user; otherwise, it correlates the account with the default user.

     • Create users as needed

       Use this choice when correlating accounts on your primary endpoint. This option presumes that the accounts on your endpoint are named exactly the same as the users. The correlation-matching algorithm is unused with this option. Instead, each account is associated to the user with the same name. If the user does not yet exist, it is created. No accounts are associated to the default user.

   • Update user fields—If a mapping exists between the object fields and the user fields, the user fields are updated with data from the objects fields.

     Users are created with no optional attributes such as full name, address and telephone numbers. During the initial acquisition of an endpoint, use this option to set these user attributes using account attribute values. During subsequent explore and correlates, use this option to refresh the user attributes to apply changes made to the account attributes, perhaps by tools other than CA Identity Manager.

5. Click Submit.

To use an explore and correlate definition

1. In an environment, click Endpoints, Execute Explore and Correlate.
2. Select Execute now to run explore and correlate immediately, or select Schedule new job to run explore and correlate at a later time or on a recurring schedule.

   Note: This operation requires the client browser to be in the same time zone as the server. For example, if the client time is 10:00 PM on Tuesday when the server time is 7:00 AM, the Explore and Correlate definition will not work.

3. Click an explore and correlate definition to execute.
4. Click Submit.

The user accounts that exist on the endpoint are created or updated in CA Identity Manager based on the explore and correlate definition you created.

To verify explore and correlate succeeded

1. Go to System, View Submitted Tasks.
2. Complete the task name field as follows: Execute Explore And Correlate
3. Click Search.

The results show if the task completed successfully.