You can schedule a reconciliation
for account and attribute
data, or you can schedule a reconciliation only for supporting data
from the managed service.
Before you begin
Depending on how your system administrator customized your system, you might not
have access to this task. To obtain access to this task or to have someone complete it for you,
contact your system administrator.
Before
you begin this task, you must create a service instance.
Procedure
To create a reconciliation schedule, complete
these steps:
- From the navigation tree, click Manage Services.
The Select
a Service page is displayed.
- On the Select a Service page, complete
these steps:
- Type information about the
service in the Search
information field.
- In the Search by field, specify
whether to search against services or business units.
- Select a service type from the Search type list.
- Select a status from the Status list,
and then click Search.
A list
of services that matches the search criteria is displayed.
If the table contains multiple pages, you can:
- Click the arrow to go to the next page.
- Type the number of the page that you want to view and click Go.
- In the Services table, click the
icon (
) next to the service to show the tasks that can be done on
the service, and then click Set Up Reconciliation. The tasks that you can do are dependent on the type
of service.
The Manage Schedules page is displayed.
- On the Manage Schedules page, complete
the following steps:
- Specify whether
a policy evaluates the accounts that
the reconciliation returns.
- Click Create.
The Set
Up Account Reconciliation notebook is displayed.
- On the General page, type information
about reconciliation schedule.
- On the Schedule page, select a schedule
interval for the reconciliation.
The fields displayed
depend on the scheduling option that you select.
- Optional: On the Query page,
specify that you are doing a "supporting data only" reconciliation,
which brings back only metadata for accounts and excludes accounts.
Alternatively, use the LDAP filter to specify the subset of accounts
or specific type of support data such as a group to be included in
the reconciliation. Specify the subset of account attributes to bring
back during the reconciliation.
By default, IBM Verify Identity Governance brings back
all attributes of accounts. By specifying the subset of attributes
that is likely to be changed on the remote resource, you can improve
reconciliation performance.
- Click OK to save the new schedule
and close the page.
Results
A message is displayed,
indicating that you successfully
created a reconciliation schedule.
What to do next
Select
another services task, or click Close.
When the Select a Service page is displayed,
click Refresh to refresh the Services table.