Attribute Mapping

Attribute mapping is required to define which target attributes correspond to the Security Identity Governance and Intelligence user or OU attributes.

About this task

This task involves either an user or OU attribute mapping definition file, which are both included in the HR adapter package.

The file consists of Security Identity Governance and Intelligence user or OU attributes and their equivalent attributes in the managed HR target. The file is structured as <IGI_attribute> = <HR_target_attribute>.

The <IGI_attribute> is fixed and must not be modified. Edit only the <HR_target_attribute>. Some <IGI_attribute> already has a fixed equivalent <HR_target_attribute> of ersaphraccounterptigiuseraccount. For example:
GIVEN_NAME=ersaphrgivennameerptigifirstName
Some <IGI_attribute> do not have a defined <HR_target_attribute> and you can assign the mapping. For example:
USER_TYPE=USER_TYPE
ATTR1=ATTR1
Note:
  • The default mapping is already included out-of-the box. If there are no changes to the attribute mapping, there is no need to import the attribute mapping files.
  • It might take up to 10 minutes for the attribute mapping changes to take effect once the file is imported.

Procedure

  1. Open the mapping definition file by using any text editor.
  2. Edit the mapping.
  3. If the target attribute has a list of predefined values, use the following syntax to convert its values to the corresponding Security Identity Governance and Intelligence attribute values. 
    [conversion].<HR_target_attribute>.<IGI_attribute> = 
[<HR_target_attribute_value1>=<IGI_attribute_value1>;...;
<HR_target_attribute_valuen>=<IGI_attribute_valuen>]
    For example:
    [conversion].ersaphrgender.GENDER=[M=0;F=1;U=]
    [conversion].erptigidisabled.DISABLED=[Y=1;N=0]
[conversion].erptigigender.GENDER=[M=0;F=1]
  4. For attributes that contains date and time, use the following syntax to convert its values.
    For example:
    
[conversion.date].ersaphrdoberptigibirthDate.BIRTHDAY=[yyyyMMdd=dd/MM/yyyy HH:mm:ss]
[conversion.date].ACCOUNT_EXPIRY_DATE.ACCOUNT_EXPIRY_DATE=
[dd/MM/yyyy HH:mm:ss=dd/MM/yyyy HH:mm:ss]
  5. Import the updated mapping definition file through the Enterprise Connectors module. For more information, see Attribute-to-permission mapping service in the IBM® Security Identity Governance and Intelligence product documentation.