Identity policies define rule-based provisioning behaviors. These policies map a member rule to a set of rules for allocation and deallocation. For example, when a user is promoted and takes on the title Vice President, CA IdentityMinder can automatically add this person to the group Country Club Member, and also automatically assign the Role Salary Reviewer.
In the context of identity policies, synchronization refers to the process of evaluating what policies a user matches, comparing that list to the stored set of polices that have already been allocated, and determining which policies must be allocated or deallocated by comparing the two lists.
The following objects manage synchronizing users with identity policies:
Note: Some code element names can be based on the obsolete term "business policies" instead of "identity policies."
|
Copyright © 2013 CA.
All rights reserved.
|
|