Portal User Guide › Using Administration Functions › Import and Export Connectors › Define an Export Connector › Export to CA Identity Manager AutoFix

Export to CA Identity Manager AutoFix

The export process to CA Identity Manager has been enhanced to automatically fix any errors in the model configuration. When creating a CA Identity Manager connector, you can select one of the following new workflow processes:

• Export Master Model Deltas with model auto fix—creates an audit card that contains all the new roles to create to fix the model
• Export Master Model Deltas with model fix—if errors were found in the model, creates an error ticket with links to the audit card.

If you select one of the previous workflow processes, the following logic is applied to CA RCM data before exporting it into CA Identity Manager:

• When connecting a resource to a provisioning role, the resource is linked to the account template belonging to the same provisioning role on the endpoint where the account template resides. If there is no such account template, CA RCM creates it.
• When connecting a parent account template to a child provisioning role, the link direction is inverted.
• When creating a CA RCM role, the type is set as follows:
  • If the role type is "Role" or "Provisioning Role", it is exported as a provisioning role.

    The role type is set to the default value of the connector.

    If the role has directly linked resources, they are moved to the linked account templates, as mentioned previously.

  • If the role type is "Policy", "Provisioning Policy", or "Account Template", it is exported as an account template.

    The role type is set to the default value of the connector.

  • If the role does not start with a valid endpoint type, the creation fails with a detailed message.
  • If the role has directly linked users, the addition fails with a detailed message.
  • If the role has resources that are not of the relevant endpoint type, the addition fails with a detailed message.
  • If a role has no type, it is exported as a provisioning role. All details for this export are as previously described.