Previous Topic: Siebel InstallationNext Topic: UNIX ETC and NIS Connector


Connector Specific Features

This section details your connector's specific management features, such as how to acquire and explore your endpoint. Also included are account, provisioning roles, account template, and group information specifically for your connector.

Acquire a Siebel Server Using the User Console

You must acquire the Siebel server before you can administer it with CA Identity Manager.

To acquire a Siebel server using the User Console

  1. Select Endpoints, Manage Endpoints,Create Endpoint
  2. Select Siebel from the drop-down list box on Create a new endpoint of Endpoint Type, and click Ok

    Use the Create Siebel Endpoint page to register a Siebel server. During the registration process, CA Identity Manager identifies the Siebel server you want to administer and gathers information about it.

  3. After entering the required information, click Submit.

    You are now ready to explore and Correlate the endpoint.

  4. Click Endpoints, Explore and Correlate Definitions, Create Explore and Correlate Definition to explore the objects that exist on the endpoint.

    The Exploration process finds all Siebel accounts and groups. You can correlate the accounts with global users at this time or you can correlate them later.

  5. Click OK to start a new definition.
  6. Complete the Explore and Correlate Tab as follows:
    1. Fill in Explore and Correlate name with any meaningful name.

      Click Select Container/Endpoint/Explore Method to click a Siebel endpoint to explore.

    2. Click the Explore/Correlate Actions to perform:
      • Explore directory for managed objects—Finds objects that are stored on the endpoint and not in the provisioning directory.
      • Correlate accounts to users—Correlates the objects that were found in the explore function with users in the provisioning directory. If the user is found, the object is correlated with the user. However, you can instead select that you want to assign the account to the existing user (the default user) or create the user.
      • Update user fields—If a mapping exists between the object fields and the user fields, the user fields are updated with data from the objects fields.
  7. Complete the Recurrence tab if you want to schedule when the task to executes.
    1. Click Schedule.
    2. Complete the fields to determine when this task should execute.

      You may prefer to schedule the task to execute overnight to interfere less with routine access of the system.

    Note: This operation requires the client browser to be in the same time zone as the server. For example, if the client time is 10:00 PM on Tuesday when the server time is 7:00 AM, the Explore and Correlate definition will not work.

  8. Click Submit.

To use an explore and correlate definition

  1. In a CA Identity Manager environment, click Endpoints, Execute Explore and Correlate.
  2. Click an explore and correlate definition to execute.
  3. Click Submit.

    The user accounts that exist on the endpoint are created or updated in CA Identity Manager based on the explore and correlate definition you created.

Acquire a Siebel Server Using the Provisioning Manager

You must acquire the Siebel server before you can administer it with CA Identity Manager. When acquiring a Siebel server, use this procedure.

From the Endpoint type task view

  1. Register the server as an endpoint in CA Identity Manager.

    Use the Siebel Server Endpoint property sheet to register a Siebel Server. Necessary mapping information should be provided to associate Siebel fields and CA Identity Manager attributes. This includes information about Siebel business objects, Siebel business components, and necessary Siebel fields for user accounts and required multi-value groups (positions, responsibilities, organizations, and views).

    During the registration process, CA Identity Manager identifies the Siebel Server you want to administer and gathers information about it.

  2. Explore the objects that exist on the endpoint.

    After registering the machine in CA Identity Manager, you can explore its contents. Use the Explore and Correlate Endpoint dialog. The Exploration process finds all Siebel Server objects. You can correlate the user accounts with global users at this time, or you can wait to correlate them.

  3. Correlate the explored user accounts with global users.

    When you correlate user accounts, CA Identity Manager creates or links the user accounts on an endpoint with global users, as follows:

    1. CA Identity Manager attempts to match the username with each existing global user name. If a match is found, CA Identity Manager associates the Siebel Server user with the global user. If a match is not found, CA Identity Manager performs the next step.
    2. If the Create Global Users as Needed button is checked, CA Identity Manager creates a new global user and associates the Siebel user account with the global user. If the Create Global Users as Needed button is unchecked, then CA Identity Manager performs the next step.
    3. CA Identity Manager associates the Siebel user account with the [default user] object.
Custom Attribute Handling in the User Console

The following are the limitations for custom attribute handling in the User Console:

Create Position Tab in the User Console

Use this tab to create a special position along with a user and associate that position with the new user, possibly as Primary. A position must be associated with a division so the corresponding division field should be filled in.

The fields in this tab are listed below:

Name

Specifies the name of the position.

Make Position Primary

When checked, specifies the the position is the primary position.

Custom Field #1-10

Specifies the custom fields for the Siebel position.

Parent Position

Specifies the position's parent name. Click the Browse button to select a new parent position.

Division

Specifies the position's associated division name. Click the Browse button to select a new division

User Account Suspension Handling

Siebel systems do not support user account suspension directly. Oracle recommends removing all employee's responsibilities in order to simulate suspension. An employee without any responsibility assigned is able to log into Siebel, but is not able to see Siebel data or perform any action.

User Account Suspension Simulation

The Siebel connector supports the suspension simulation approach.

Once an account has been suspended, you must re-assign the original set of responsibilities back to the account using the Provisioning Server to resume. A new field called Enable user suspension simulation has been added to the Siebel Server tab of the Siebel endpoint and when checked, user suspension simulation is enabled.

Directly Using the eTSuspended Attributes

In addition to the suspension simulation approach, the Siebel connector lets you map the eTSuspended attribute to any Siebel user's field. After the mapping, Siebel (or some custom code incorporated into Siebel) takes care of suspension/resumption processing.

Note: Suspension simulation and direct use of the eTSuspended attribute may interfere with each other, so it is not recommended to enable both direct use and simulation at the same time.

Create User Position Feature

A new Enable create user position feature has been added to the Siebel Server tab of the Siebel Endpoint property sheet that lets you create a position for accounts. This feature can also be set using account templates. When checked, the feature is enabled and positions are created for each account and account template. When unchecked, the feature is disabled. By default, the feature is disabled.

Error Message when Removing All Positions from an Employee

Symptom:

When I try to remove all positions from an employee record, I see an error message stating that an employee must have at least one position.

However, all positions are removed.

Solution:

When you try to remove all positions, the product works correctly and no error message should appear. This problem is due to an error in the Siebel API.

Well-Known Attribute %ENDPOINT_DESCRIPTION%

This applies to the following connectors: Windows, Oracle RDBMS, Siebel, UNIX NIS, MS SQL Server, and OpenVMS.

These endpoint types do not define the endpoint description in the eTDescription attribute. This means that until recently, you could not search on the endpoint description. In addition, the search screen did not display the endpoint description.

You can now use the new well-known attribute %ENDPOINT_DESCRIPTION% for the affected connectors.

The DefaultEndpointSearch role definition has been updated, to allow the Default Endpoint Search screen to use the new well-known attribute. If you are upgrading from an older version of CA Identity Manager, import this modified screen after upgrading. For more information, see the Environment Changes section in your Upgrade Guide.

Siebel Endpoint Property Sheet

The Siebel Endpoint Property Sheet consists of ten property pages with seven being specific to the Siebel Connector. The following property pages are Siebel specific:

Siebel Server

Use the Siebel Server Endpoint property page to register a Siebel Server.

Note: Siebel employee or user records that are used as proxy accounts in the SBL endpoint object just have a blank "New Responsibility" field.

Mapping Table: User

Use the Mapping Table: User property page to configure custom mappings for user single-value fields. To edit the custom attributes in the custom attributes list box, click the Edit Button to bring up the Attribute Mapping Dialog. You can then add a new entry in a mapping table or edit an existing entry.

Note: When more than one item corresponding to the same CA Identity Manager attribute appears in a mapping table, it is not considered an error. The last item found in the mapping table will be taken. This can happen when a client other than Provisioning Manager is used.

Note: Only one user account type is supported per endpoint.

Mapping Table: MVG

Use the Mapping Table: MVG property page to view and set mapping information for fields in user accounts and responsibilities associated with multi-value groups. This property page contains three similar groups of controls for the user’s positions, responsibilities, and organizations, and two groups of controls for responsibility’s views and organizations.

Mapping Table: Position

Use the Mapping Table: Position property page to configure custom mappings for Position's single-value fields.

Mapping Table: Organization

Use the Mapping Table: Organization property page to configure custom mappings for Organization's single-value fields.

Mapping Table: Responsibility

Use the Mapping Table: Responsibility property page to configure custom mappings for Responsibility's single-value fields.

Mapping Table: Division

Use the Mapping Table: Division property page to configure custom mappings for Internal Division's single-value fields.

Mapping Table: View

Use the Mapping Table: View property page to configure custom mappings for View's single-value fields

Mapping Table: LOV

Use the Mapping Table: LOV property page to configure mappings for list of values' single-value fields.

Siebel User Property Sheet

The Siebel User Property Sheet consists of six property pages with four being specific to the Siebel Connector. The following property pages are Siebel specific:

Profile

Use the Profile property page when managing your users and configuring custom mappings for user single-value fields. To edit the custom attributes in the custom attributes list box, click the Edit Button to bring up the Edit custom attribute Dialog. Depending on the type of control specified in the mapping table for the attribute being edited, you will see either combo box to select a value of the user attribute or an edit box to type in the value you want for the user attribute.

Positions

Use this property page to manage employee positions. You can view a list of all available and occupied positions. You can select a position in the All Positions list box and move it to the Occupied Positions list box to un-assign a position. You can also move a select position from the Occupied Positions list box into the All Positions list box to un-assign an employee position. To assign an employee's primary position, you can copy a selected position from the Occupied Positions list to the Primary Positions text box by clicking the v (Down) button.

Note: Only the user account of "employee" type can be associated with positions. Employee must hold at least one position.

Responsibilities

Use this property page to manage user account's responsibilities. You can view a list of all available and assigned responsibilities. You can select a responsibility in the All Responsibilities list box and move it to the Assigned Responsibilities list box to un-assign a responsibility. You can also move a selected responsibility from the Assigned Responsibilities list box into the All Responsibilities list box to un-assign an employee responsibility. To assign an employee's primary responsibility, you can copy a selected responsibility from the Assigned Responsibilities list to the Primary Responsibility text box by clicking the v (Down) button.

Member of (Organizations)

Use this property page to manage employee's organizations. You can view a list of all available and assigned organizations. You can select an organization in the All Organizations list box and move it to the Member of list box to assign an organization. You can also move a selected organization from the Member of list box into the All Organizations list box to un-assign an employee organization. To assign an employee's primary organization, you can copy a selected organization from the Member of list to the Primary Organization text box by clicking the v (Down) button.

Note: Associating a user account with an organization is not required as this is done implicitly by Siebel. Primary organization cannot be removed from a user.

Siebel Responsibility Property Sheet

This Siebel Responsibility Property Sheet consists of four property pages with three being specific to Siebel.

Responsibility

Use this property page to view the Siebel responsibility name and the custom attributes associated with the Siebel responsibility.

Member of (Organizations)

Use this property page to manage a responsibility's organizations. You can view a list of all available and assigned organizations. You can select an organization in the All Organizations list box and move it to the Member of list box to assign an organization. You can also move a selected organization from the Member of list box into the All Organizations list box to un-assign a responsibility’s organization. To assign a responsibility's primary organization, you can copy a selected organization from the Member of list to the Primary Organization text box by clicking the v (Down) button.

Views

Use this property page to manage responsibility's views. You can view a list of all available and assigned views. You can select a view in the All Views list box and move it to the Assigned list box to assign an view. You can also move a selected view from the Assigned list box into the All Views list box to un-assign a responsibility’s view.
There’s no primary view attribute for a responsibility object.

Siebel Position Property Sheet

The Siebel Position Property Sheet consists of four property pages with three being specific to Siebel.

Position

Use this property page to view the Siebel position name and the custom attributes associated with the Siebel position.

Parent Position

Use this property page to manage a position's parent position. You can view a list of all available positions. You can select a position in the All Positions list box and move it to the Parent Position list box to assign a parent position. You can also move a position from the Parent Position list box into the All Positions list box to un-assign a position’s parent position.

Division

Use this property page to manage a position's division. You can view a list of all available divisions. You can select a division in the All Divisions list box and move it to the Associated Division list box to assign a division

Siebel Organization Property Sheet

The Siebel Organization Property Sheet consists of two property pages with one, the Organization property page, being specific to Siebel.

Organization

Use this property page to view the Siebel organization name and the custom attributes associated with the Siebel organization.

Siebel View Property Sheet

The Siebel View Property Sheet consists of two property pages with one, the View property page, being specific to Siebel.

View

Use this property page to view the Siebel view name and the custom attributes associated with the Siebel view.

Siebel Internal Division Property Sheet

The Siebel Internal Division Property Sheet consists of three property pages with two being specific to Siebel.

Internal Division

Use this property page to view the Siebel division name and the custom attributes associated with the Siebel division.

Parent Division

Use this property page to manage a division's parent division. You can view a list of all available divisions. You can select a division in the All Divisions list box and move it to the Parent Division list box to assign a parent division. You can also move a division from the Parent Division list box into the All Divisions list box to un-assign a division’s parent division.

Siebel LOV Property Sheet

The Siebel LOV Property Sheet consists of two property pages with one, the Properties property page, being specific to Siebel.

Properties

Use this property page to view the LOV code, type of value, and the display value.