CA Identity Manager can automatically synchronize user accounts with identity policies at different points during a task’s lifecycle.
A CA Identity Manager task generates events, detectable activities that occur during task processing. For example, the default Create User task generates the CreateUserEvent, AddUserToGroupEvent, and the AssignAccessRoleEvent. You can configure CA Identity Manager to synchronize users after a task completes, or when each event completes.
Note: The section Synchronize Users with Identity Policies provides more information on the user synchronization process.
To configure a task to trigger user synchronization
CA Identity Manager displays a search screen.
Note: If you select the On Task Completion option for a task that includes multiple events, CA Identity Manager does not synchronize users until all of the events in the task complete. If one or more of those events require workflow approval, this may take several days. To prevent CA Identity Manager from waiting to apply identity policies until all events complete, select the On Every Event option.
For tasks with a primary and secondary event for the same user, setting user synchronization to On Every Event may result in more evaluations for which policies apply to a user than if the On Task Completion option is selected.
Copyright © 2015 CA Technologies.
All rights reserved.