Driver processing order

Hi,

I have a situation where a user is created in the vault from an Oracle HR system. This triggers the AD driver to them process the add event and provision them to AD.

The issue is that the entitlements driver sometimes does not process until after the AD driver. When this happens the AD driver veto's the event because there is no entitlement on the user object.

Does anyone know if there is a way of specifying which driver processes an event first within eDirectory? Or failing this is there a way to perhaps re-send an event through a driver to cater for these situations?

Thanks in advance

John
  • Jevans78 wrote:

    > The issue is that the entitlements driver sometimes does not process
    > until after the AD driver. When this happens the AD driver veto's the
    > event because there is no entitlement on the user object.
    >
    > Does anyone know if there is a way of specifying which driver processes
    > an event first within eDirectory? Or failing this is there a way to
    > perhaps re-send an event through a driver to cater for these
    > situations?


    IDM handle that situation by default.

    When the AD driver vetoed the initial add without entitlement, the object won't
    receive an association. Subsequently adding the entitlement should result in a
    modify event on the subscriber that will get converted into a synthetic add and
    processed as such.

    If your driver does not work that way, find out if it sees a modify event when
    the entitlement is added. If not, add DirXML-EntitlementRef to your subscriber
    notify filter. If a modify event is seen, figure out why it's not being
    converted to an add event or why that synthetic add is not processed as you
    expect it to.

    Post a level 3 trace if you want people here to look over it.

    --
    http://www.is4it.de/en/solution/identity-access-management/
  • Brilliant thanks. The DirXML-EntitlementRef isn't in the AD driver filter, so I'll add that as a notify and see if that triggers another event. Sounds like that'll sort it, but I'll post back once I've tested.