Sun Identity Manager 8.1 Resources Reference

Example 3: Action that Follows the Deletion of a User

This procedure shows how to include an action that will run after the deletion of a user on the Active Directory resource.

ProcedureIncluding an Action that Follows the Deletion of a User

  1. Enter delete after action in the Identity Manager User Attribute column of the resource’s schema map.

  2. In the Attribute Type column, select string.

  3. In the Resource User Attribute column, enter IGNORE_ATTR. Leave the Required, Audit, Read Only, and Write Only columns unchecked.

  4. Add this to the Deprovision Form user form after the </Include> tag:

    <Field name= ’resourceAccounts.currentResourceAccounts[AD].attributes.
    delete after action’>
  5. Create the following XML file and import into Identity Manager. (Change file paths according to your environment.)

    <?xml version=’1.0’ encoding=’UTF-8’?> <!DOCTYPE Waveset PUBLIC 
        ’waveset.dtd’ ’waveset.dtd’>
        <ResourceAction name=’AfterDelete’>
           <ResTypeAction restype=’Windows Active Directory’ timeout=’6000’>
              echo delete >> C:\Temp\%WSUSER_accountId%.txt
  6. Edit the XML for the Active Directory resource and add information to the “delete after action” schema mapping. Here is an example of a complete schema mapping for this resource with the new additions. (You will be adding the views-related information.)

    <AccountAttributeType id=’12’ name=’delete after action’ syntax=’string’ 
             mapName=’IGNORE_ATTR’ mapType=’string’>