PingFederate Server

Extending the Identity Store Provisioner contract for groups

Identity Store Provisioners can be written with an option allowing administrators to add to the core group attributes the plugin instance requires.

About this task

Both the core and extended group attributes that you define must be mapped when you configure Write Groups within an inbound provisioning connection.

To keep your plugin flexible across multiple connections, assuming a one-to-one connection-to-identity store provider setup, you might want to hard code a set of core attributes for all connections to fulfill, and then extend attributes on as needed when a partner connection depends on additional attributes.

If this is a child instance, select the override check box to modify the configuration.

Steps

  1. On the Extended Group Contract tab, create and modify attributes as needed.

    Option Action

    Add an attribute

    Enter the attribute name in the text box and click Add.

    Modify an attribute name

    1. Click Edit under Action for the attribute.

    2. Make the change and click Update

    If you change your mind,click Cancel under Action.

    Delete an attribute

    Click Delete under Action for the attribute.

  2. Click Next.