Extending the Identity Store Provisioner contract for groups - PingFederate - 10.2

PingFederate Server

bundle
pingfederate-102
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 10.2
category
Product
pf-102
pingfederate
ContentType_ce

Identity Store Provisioners can be written with an option allowing administrators to add to the core group attributes the plugin instance requires.

Both the core and extended group attributes that you define must be mapped when you configure Write Groups within an inbound provisioning connection.

Tip:

To keep your plugin flexible across multiple connections, assuming a one-to-one connection-to-identity store provider setup, you might want to hard code a set of core attributes for all connections to fulfill, and then extend attributes on as needed when a partner connection depends on additional attributes.

Note:

If this is a child instance, select the override check box to modify the configuration.

  1. On the Extended Group Contract tab, create and modify attributes as needed.
    OptionAction
    Add an attribute Enter the attribute name in the text box and click Add.
    Modify an attribute name
    1. Click Edit under Action for the attribute.
    2. Make the change and click Update
    Note:

    If you change your mind,click Cancel under Action.

    Delete an attribute Click Delete under Action for the attribute.
  2. Click Next.