How to assign profiles to users from multiple systems in NIM/Usercube

Products Identity Manager Discussions & Questions
, , ,
1

Hello everyone,

In order to assign profiles in Usercube/NIM to users, we first need to define which users are eligible for profile assignment.

To do this, we must configure the SetInternalUserProfilesTask, if I’m not wrong.

I’m running into a limitation: it doesn’t seem possible to configure more than one SetInternalUserProfilesTask. When multiple tasks are configured, they override each other. Also, as expected, attempting to configure more than one EntityType and ResourceType within the same task results in an error.

The challenge is that EntityType and ResourceType are tightly coupled:

  • A specific ResourceType must match the EntityType.
  • A ResourceType can only be associated with a single EntityType.

This makes it impossible to configure SetInternalUserProfilesTask for two different systems independently. As a result, we are forced to merge two separate EntityTypes and ResourceTypes into one, which defeats the purpose of keeping the two systems separate.

Has anyone found a way to:

  • Configure more than one SetInternalUserProfilesTask, or
  • Make users from two different systems visible and assignable in the “Assigned Profiles” without merging the EntityTypes?

Any guidance or best practices would be greatly appreciated.

2

I was wrong; it is not the SetInternalUserProfilesTask but the SelectPersonasByFilterQueryHandlerSetting that displays the resources in the profile assignment.

With SelectPersonasByFilterQueryHandlerSetting, it is not possible to configure two different entity types, so the two systems need to be consolidated into one.

3

Thanks for following up Kamil!