Owner and issuer for cron task instance

You might want to set different owner and issuer for different cron task instances. For example, some user wants to have issuer as <varname>saml</varname> and owner as <varname>scim</varname> and others want to have issuer as <varname>saml</varname> and owner as <varname>local </varname> to be able to manage users.

During upgrade to Manage, all Maximo® users are synchronized to Maximo Application Suite. You can specify the authentication method, which was used before the upgrade. To specify the authentication method, you must configure MXE_OLDAUTHINTICATION in Manage custom resource. A valid list of values is local, which is default, saml, and ldap. Based on this setting, two user properties are set in Maximo Application Suite:
  • Authentication method, which is set to MXE_OLDAUTHINTICATION.
  • Owner, which is set to local for type local and scim for values ldap and saml. If Owner is set to scim, the user cannot be changed in Maximo Application Suite because it controls an external repository.
One setting controls two properties. You might want users to be managed in Maximo Application Suite even if the authentication method is set to saml or ldap . Also, you might have internal and external users even if all authentication is done in saml. In this case, you want to maintain some users in Maximo Application Suite and other users to be external and managed by ldap .

You can configure Owner and Issuer (authentication type) during user synchronization from Manage to Maximo Application Suite.

To do this, two new cron task parameters are added to the user synchronization MASUSERSYNC cron task:
  • Owner
  • Issuer

By default, the Owner and Issuer are set to null so that the default logic remains the same. It is relayed to MXE_OLDAUTHINTICATION to set authentication method and owner in Maximo Application Suite.

If you want to fix users, which were already sent to Maximo Application Suite, you can fix these users after the initial synchronization. You must reset the MASISSUER column in the MAXUSER table to null, setting Owner and Issuer as cron task parameters and starting MASUSERSYNC cron task.

If you create users that use Maximo integration framework in Manage and want to synchronize it to Maximo Application Suite, then you can set cron task parameters in the way you want and synchronize new users.

For example, if you want to have the authentication method as saml but the user to be managed in Maximo Application Suite, you can set:
Issuer
saml
Owner
local