Identity policies are evaluated and applied during the user synchronization process. You can configure automatic synchronization by specifying one of the following user synchronization options for a task:
CA Identity Manager starts the user synchronization process after all of the events in a task have completed.
CA Identity Manager starts the user synchronization process when each event in a task completes.
For best performance, limit the number of tasks that trigger automatic user synchronization.
Consider the following when configuring user synchronization:
In most cases, passwords are not used in identity policy conditions.
Since the Synchronize User task triggers identity policy evaluations, CA Identity Manager performs the evaluations again if the user synchronization option is enabled for this task.
When possible, create tasks that execute modifications that trigger identity policy conditions and enable user synchronizations for those tasks only.
Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |