Workflow Reference Overview
This reference documents every workflow that DirX Identity delivers as factory data. The factory data is loaded into the Connectivity configuration database during the initial configuration and appears in the Identity Manager below Connectivity → Workflows → Default.
The delivered workflows are samples. Copy a workflow into your own scenario with the Identity Manager and adapt the copy; do not change the delivered objects.
| Category | Workflows | Java-based real-time | Tcl-based scheduled |
|---|---|---|---|
1 |
1 |
0 |
|
35 |
18 |
17 |
|
4 |
4 |
0 |
|
5 |
5 |
0 |
|
9 |
9 |
0 |
|
20 |
0 |
20 |
|
68 |
68 |
0 |
|
32 |
0 |
32 |
|
5 |
5 |
0 |
In total, DirX Identity delivers 179 workflows: 110 Java-based real-time workflows and 69 Tcl-based scheduled workflows.
ESSO Provisioning
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
- |
Java, real-time |
|
Sample workflow to provision an Evidian Esso/Active Directory domain from a DirX Identity target system. |
Identity Store
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
- |
Tcl, scheduled |
- |
Starts a certification campaign |
|
- |
Java, real-time |
|
Sample workflow for monitoring certification campaigns. |
|
- |
Java, real-time |
|
Add description here! |
|
- |
Tcl, scheduled |
- |
Regular cleanup of deleted or outdated objects in the Identity Store |
|
- |
Tcl, scheduled |
- |
Runs some maintenance workflows |
|
- |
Tcl, scheduled |
- |
Performs data consistency check in Identity Store |
|
- |
Tcl, scheduled |
- |
Perform Execution of the Consistency Rule CreateFunctionalUsersForUnassignedAccounts in Identity Store |
|
- |
Tcl, scheduled |
- |
Perform Execution of the Consistency Rule CreatePersonasForNonPrimaryAccounts in Identity Store |
|
- |
Tcl, scheduled |
- |
Perform Execution of the Consistency Rule CreateUsersForUnassignedAccounts in Identity Store |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for an account. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for a context entry. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for a location. |
|
- |
Java, real-time |
|
Sample workflow for handling a functional user change event. Resolves the functional user privileges and / or updates their account attributes. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for a location. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for an organization. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for an organizational unit. |
|
- |
Java, real-time |
|
Sample workflow for handling a persona change event. Resolves the persona privileges and / or updates their account attributes. |
|
- |
Java, real-time |
|
Sample workflow for handling a change event for a location. |
|
- |
Java, real-time |
|
Sample workflow for handling an user change event. Resolves the user privileges and / or updates their account attributes. |
|
- |
Tcl, scheduled |
- |
Extracts all audit trail records to a file and deletes the records afterwards |
|
- |
Tcl, scheduled |
- |
Full segregation of duty check that reports all existing violations |
|
- |
Java, real-time |
|
Sample workflow for generic handling of a change event. Calls consistency rules and the userhook. |
|
- |
Tcl, scheduled |
- |
Workflow generating reports out of an LDAP directory |
|
- |
Tcl, scheduled |
- |
Initializes reapproval for all privileges marked for reapproval |
|
- |
Java, real-time |
|
Sample workflow for finding and flagging the users affected by privilege changes. Checks for TBA flagged groups, permissions and roles and marks the affected users with TBA. |
|
- |
Tcl, scheduled |
- |
Perform Execution of policies in Identity Store |
|
- |
Tcl, scheduled |
- |
Performs privilege resolution in Identity Store |
|
- |
Java, real-time |
|
Sample workflow for processing tickets. |
|
- |
Tcl, scheduled |
- |
Generate reports from Identity Store |
|
- |
Tcl, scheduled |
- |
Perform Execution of 'ResolveInconsistentGroupMembership' rule in Identity Store |
|
- |
Java, real-time |
|
Sample workflow for risk governance. |
|
- |
Tcl, scheduled |
- |
Run Workflow in foreign DirX Identity domain |
|
- |
Tcl, scheduled |
- |
Starts all not yet started workflows for reapproval |
|
- |
Java, real-time |
|
Workflow for checking uid-s for duplicates and incorrect length. |
|
- |
Java, real-time |
|
Sample workflow for handling privilegeResolution. Checks for expired users and assignments, applies provisioning rules for given users and does a user resolution. |
Ldap2Fs
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
- |
Java, real-time |
|
Workflow to export connectivity data. |
|
- |
Java, real-time |
|
Workflow to export provisioning data. |
|
- |
Java, real-time |
|
Workflow to import connectivity data. |
|
- |
Java, real-time |
|
Workflow to import provisioning data. |
Password Synchronization
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
- |
Java, real-time |
|
Sample workflow to set (expired) passwords of DirX Identity accounts. If run scheduled it searches for expired accounts in dependence of the configured search settings, generates and changes affected account passwords and triggers the target system specific setPassword workflow. If run event based it reacts on password change and password expired requests for a certain account and then proceeds as in the scheduled case. |
|
- |
Java, real-time |
|
Sample workflow to reset passwords of DirX Identity accounts. If the workflow is configured for personal accounts it reads the password from the user and sets it at the account. If it is configured for privileged accounts it generates a new password and sets it at the account. |
|
- |
Java, real-time |
|
Sample workflow to reset passwords of DirX Identity (functional) accounts after an account’s password has been read. The password will be reset after the configured minimum number of hours have passed. |
|
- |
Java, real-time |
|
Processes password change events; - finds associated user resp account - updates password in user entry - searches all accounts of this user - sends setPassword- requests to internal IDS-J queue |
|
- |
Java, real-time |
|
Password expiration notification workflow |
Source Realtime
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
ADS |
Java, real-time |
|
Sample workflow to import users from an ADS via LDAP |
|
CSVfile |
Java, real-time |
|
Sample workflow to export users to an LDIF file |
|
CSVfile |
Java, real-time |
|
Sample workflow to Import Users from an LDIF file |
|
Import To Identity |
Java, real-time |
|
Sample workflow to import users from a separate LDAP user branch |
|
Import To Identity |
Java, real-time |
|
Sample workflow to import users from a separate LDAP user branch |
|
JDBC |
Java, real-time |
|
Sample workflow to import roles from a database via Web Services |
|
JDBC |
Java, real-time |
|
Sample workflow to import users from a database via the Service Layer Connector |
|
LDIFfile |
Java, real-time |
|
Sample workflow to export users to an LDIF file |
|
LDIFfile |
Java, real-time |
|
Sample workflow to import users from an LDIF file |
Source Scheduled
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
CSVfile |
Tcl, scheduled |
- |
Workflow for Import to LDAP from a CSV file |
|
CSVfile |
Tcl, scheduled |
- |
Workflow for Export from LDAP to a CSV file |
|
JDBC |
Tcl, scheduled |
- |
Workflow for Export from LDAP and Import into a JDBC database |
|
JDBC |
Tcl, scheduled |
- |
Workflow for Export from a JDBC database and Import into LDAP |
|
LDAP |
Tcl, scheduled |
- |
Workflow for synchronization of a corporate directory with DirX Identity |
|
LDAP |
Tcl, scheduled |
- |
Workflow for synchronization of a corporate directory with DirX Identity |
|
LDIFfile |
Tcl, scheduled |
- |
Workflow for Export from LDAP to an LDIF file |
|
LDIFfile |
Tcl, scheduled |
- |
Workflow to convert an LDIF file to a CSV file |
|
LDIFfile |
Tcl, scheduled |
- |
Workflow for Import to LDAP from an LDIF file |
|
- |
Tcl, scheduled |
- |
Extended creation workflow with policy execution and privilege resolution. - copy the required creation workflow - copy this workflow (uncheck the nested copy flag) - link the creation workflow to the first activity of the copied workflow |
|
ODBC |
Tcl, scheduled |
- |
Workflow for Export from LDAP to ODBC |
|
ODBC |
Tcl, scheduled |
- |
Combined workflow to run ODBC2Ident and Ident2ODBC in sequence |
|
ODBC |
Tcl, scheduled |
- |
Workflow for Export from ODBC and Import to LDAP |
|
SAP |
Tcl, scheduled |
- |
Workflow for Import to LDAP from a SAP ERP HR file |
|
SAP |
Tcl, scheduled |
- |
Workflow for Import to LDAP from a SAP ERP OM file |
|
XMLfile |
Tcl, scheduled |
- |
Workflow for Import to LDAP from a DSML file |
|
XMLfile |
Tcl, scheduled |
- |
Workflow for Export from LDAP to a XML file in DSML format |
|
XMLfile |
Tcl, scheduled |
- |
Workflow for Export from LDAP to a XML file |
|
XMLfile |
Tcl, scheduled |
- |
Workflow for Export from LDAP to an XML file with XSLT conversion |
|
XMLfile |
Tcl, scheduled |
- |
Workflow for Import to LDAP from a XML file |
Target Realtime
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
ADS |
Java, real-time |
|
Sample workflow to synchronize deltas from an Active Directory domain. |
|
ADS |
Java, real-time |
|
Sample workflow to provision an Active Directory domain from a DirX Identity target system. |
|
ADS |
Java, real-time |
|
Sample workflow to restore an Active Directory domain |
|
ADS |
Java, real-time |
|
Sets the password in an ADS connected system |
|
ADS |
Java, real-time |
|
Sample workflow to validate an Active Directory domain against a DirX Identity target system. |
|
Boston Workstation |
Java, real-time |
|
Sample workflow to provision a Boston Workstation connected system from a DirX Identity target system. |
|
Boston Workstation |
Java, real-time |
|
Sample workflow to validate an Boston Workstation connected system against a DirX Identity target system. |
|
Citrix ShareFile |
Java, real-time |
|
Sample workflow to provision a Citrix ShareFile connected system from a DirX Identity target system. |
|
Citrix ShareFile |
Java, real-time |
|
Sample workflow to validate a Citrix ShareFile connected system against a DirX Identity target system. |
|
Domino |
Java, real-time |
|
Sample workflow to synchronize HCL Domino with a DirX Identity target system. |
|
Domino |
Java, real-time |
|
Sample workflow to validate HCL Domino against a DirX Identity target system. |
|
EntraID |
Java, real-time |
|
Sample workflow to provision an Entra ID directory from a DirX Identity target system. |
|
EntraID |
Java, real-time |
|
Sets the password in an Entra ID directory. |
|
EntraID |
Java, real-time |
|
Sample workflow to validate an Entra ID directory against a DirX Identity target system. |
|
Google Apps |
Java, real-time |
|
Sample workflow to provision a Google Apps directory from a DirX Identity target system. |
|
Google Apps |
Java, real-time |
|
Sets the password in a Google Apps directory. |
|
Google Apps |
Java, real-time |
|
Sample workflow to validate a Google Apps directory against a DirX Identity target system. |
|
Imprivata OneSign |
Java, real-time |
|
Sample workflow to provision a Imprivata OneSign connected system from a DirX Identity target system. |
|
Imprivata OneSign |
Java, real-time |
|
Sample workflow to provision an application managed via Imprivata OneSign connected system from a DirX Identity target system. |
|
Imprivata OneSign |
Java, real-time |
|
Sets the subscriber password in an Imprivata OneSign target system. |
|
Imprivata OneSign |
Java, real-time |
|
Sets the account password in an Imprivata OneSign target system. |
|
JDBC |
Java, real-time |
|
Sample workflow to provision an JDBC database from a DirX Identity target system. |
|
JDBC |
Java, real-time |
|
Sets the password in a JDBC database. |
|
JDBC |
Java, real-time |
|
Sample workflow to validate an JDBC database against a DirX Identity target system. |
|
LDAP |
Java, real-time |
|
Sample workflow to provision an LDAP directory from a DirX Identity target system. |
|
LDAP |
Java, real-time |
|
Sample workflow to provision a cluster of LDAP directories from the corresponding DirX Identity target systems. |
|
LDAP |
Java, real-time |
|
Sample workflow to synchronize deltas from an LDAP directory. |
|
LDAP |
Java, real-time |
|
Sample workflow to restore an LDAP target system. |
|
LDAP |
Java, real-time |
|
Sets the password in an LDAP target system. |
|
LDAP |
Java, real-time |
|
Sample workflow to validate an LDAP directory against a DirX Identity target system. |
|
Java, real-time |
|
Workflow running Consistency Rules to handle Email accounts. |
||
Java, real-time |
|
Calls Email Consistency Rules when subscriber entry changes and an error message is present. |
||
Java, real-time |
|
Workflow to provision Email objects from DirX. |
||
Medico |
Java, real-time |
|
Sample workflow to provision a Medico connected system from a DirX Identity target system. |
|
Medico |
Java, real-time |
|
Sets the password of a Login entry in a Medico connected system. |
|
Medico |
Java, real-time |
|
Sample workflow to provision a Medico connected system from DirX Identity target system. |
|
Notes |
Java, real-time |
|
Sample workflow to provision a Notes connected system from a DirX Identity target system. |
|
Notes |
Java, real-time |
|
Sample workflow to restore a IBM Notes database |
|
Notes |
Java, real-time |
|
Sets the password in a Notes connected system |
|
Notes |
Java, real-time |
|
Sample workflow to validate a IBM Notes connected system against a DirX Identity target system. |
|
RACF |
Java, real-time |
|
Sample workflow to provision an RACF directory from a DirX Identity target system. |
|
RACF |
Java, real-time |
|
Sets the password in an RACF target system. |
|
RACF |
Java, real-time |
|
Sample workflow to provision an RACF directory from a DirX Identity target system. |
|
Salesforce |
Java, real-time |
|
Sample workflow to provision a Salesforce directory from a DirX Identity target system. |
|
Salesforce |
Java, real-time |
|
Sample workflow to provision a Salesforce Account from a Business Object (organization representing the SLSFAccount); triggered by an EBR event |
|
Salesforce |
Java, real-time |
|
Sample workflow to provision a Salesforce Contact from a Identity user (representing the SLSFContact); triggered by an EBR event |
|
Salesforce |
Java, real-time |
|
Sets the password in a Salesforce target system. |
|
Salesforce |
Java, real-time |
|
Sample workflow to validate a Salesforce directory against a DirX Identity target system. |
|
SAP Identity Directory |
Java, real-time |
|
Sample workflow to provision a SAP Cloud Identity Directory from a DirX Identity target system. |
|
SAP Identity Directory |
Java, real-time |
|
Sample workflow to validate a SAP Cloud Identity Directory against a DirX Identity target system. |
|
SAP R3 UM |
Java, real-time |
|
Sample workflow to provision an SAPR3UM connected system from a DirX Identity target system. |
|
SAP R3 UM |
Java, real-time |
|
Sets the password in an SAPR3UM connected system |
|
SAP R3 UM |
Java, real-time |
|
Sample workflow to validate an SAPR3UM connected system against a DirX Identity target system. |
|
SCIMv2 |
Java, real-time |
|
Sample workflow to provision a SCIMv2 directory from a DirX Identity target system. |
|
SCIMv2 |
Java, real-time |
|
Sample workflow to validate a SCIMv2 directory against a DirX Identity target system. |
|
Service Management |
Java, real-time |
|
Sample workflow to manually provision a service management connected system. |
|
SharePoint |
Java, real-time |
|
Sample workflow to provision a cluster of SharePoint sites from the corresponding DirX Identity target systems either scheduled or triggered by an event. |
|
SharePoint |
Java, real-time |
|
Sample workflow to validate a cluster of SharePoint sites against the corresponding DirX Identity target systems |
|
SIPORT |
Java, real-time |
|
Sample workflow to provision an SIPORT database from a DirX Identity target system. |
|
SIPORT |
Java, real-time |
|
Sample workflow to validate an SIPORT database against a DirX Identity target system. |
|
Unify Office |
Java, real-time |
|
Sample workflow to provision a Unify Office directory from a DirX Identity target system. |
|
Unify Office |
Java, real-time |
|
Sample workflow to validate a Unify Office directory against a DirX Identity target system. |
|
UNIX-OICF |
Java, real-time |
|
Sample workflow to provision a UNIX-OICF directory against a DirX Identity target system. |
|
UNIX-OICF |
Java, real-time |
|
Sets the password in a UNIX-OICF target system. |
|
UNIX-OICF |
Java, real-time |
|
Sample workflow to validate a UNIX-OICF directory against a DirX Identity target system. |
|
WinLA-OICF |
Java, real-time |
|
Sample workflow to provision a Windows Local Accounts and Groups (SAM) database from a DirX Identity target system. |
|
WinLA-OICF |
Java, real-time |
|
Sets the password in a Windows Local Accounts and Groups target system. |
|
WinLA-OICF |
Java, real-time |
|
Sample workflow to validate a Windows Local Accounts and Groups (SAM) database against a DirX Identity target system. |
Target Scheduled
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
ADS |
Tcl, scheduled |
|
Workflow for Validation between ODBC and Identity Store |
|
ADS |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to ADS and backwards |
|
HiPath |
Tcl, scheduled |
|
Bidirectional synchronization between Identity Store and HiPath 4000 |
|
JDBC |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to JDBC and backwards |
|
JDBC |
Tcl, scheduled |
- |
Sync Workflow JDBC Accounts in state TBDEL |
|
JDBC |
Tcl, scheduled |
- |
Sync Workflow JDBC Groups in state TBDEL |
|
JDBC |
Tcl, scheduled |
- |
synch back the newly created accounts to Role to get the JDBC keys |
|
JDBC |
Tcl, scheduled |
- |
synch back newly created groups to Role to get the JDBC keys |
|
JDBC |
Tcl, scheduled |
|
Workflow for Validation between JDBC and Identity Store |
|
LDAP |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to LDAP and backwards |
|
LDAP |
Tcl, scheduled |
- |
Compares and calculates changes from Identity Store to LDAP and writes an LDIF change file |
|
LDAP |
Tcl, scheduled |
|
Workflow for Validation between LDAP and MetaRole |
|
LDAPXXL |
Tcl, scheduled |
|
Workflow for synchronization to LDAP |
|
LDAPXXL |
Tcl, scheduled |
|
Workflow for Validation between LDAP and Identity Store |
|
NDS |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to NDS and backwards |
|
NDS |
Tcl, scheduled |
|
Workflow for Validation between NDS and Identity Store |
|
Notes |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to Notes and backwards |
|
Notes |
Tcl, scheduled |
|
Workflow for Validation between Notes and Identity Store |
|
ODBC |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to ODBC and backwards |
|
ODBC |
Tcl, scheduled |
- |
Sync Workflow ODBC Accounts in state TBDEL |
|
ODBC |
Tcl, scheduled |
- |
Sync Workflow ODBC Groups in state TBDEL |
|
ODBC |
Tcl, scheduled |
- |
synch back the newly created accounts to Role to get the ODBC keys |
|
ODBC |
Tcl, scheduled |
- |
synch back newly created groups to Role to get the ODBC keys |
|
ODBC |
Tcl, scheduled |
|
Workflow for Validation between ODBC and Identity Store |
|
RACF |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to RACF and backwards |
|
RACF |
Tcl, scheduled |
|
Workflow for Validation from RACF to Identity Store |
|
SAPEPUM |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to SAP NetWeaver UM and backwards |
|
SAPEPUM |
Tcl, scheduled |
|
Workflow for Validation from SAP NetWeaver UM to Identity Store |
|
SAPR3UM |
Tcl, scheduled |
|
Workflow for Export from Identity Store and Import to SAP ECC UM and backwards |
|
SAPR3UM |
Tcl, scheduled |
|
Workflow for Validation from SAP ECC UM to Identity Store |
|
SiPass |
Tcl, scheduled |
|
Workflow for synchronization to SiPass |
|
SiPass |
Tcl, scheduled |
|
Workflow for validation between SiPass and Identity Store |
Transport
| Workflow | Group | Technology | Type | Description |
|---|---|---|---|---|
- |
Java, real-time |
|
Sample workflow to export connectivity collections. Exports all Java-based LDAP workflows. |
|
- |
Java, real-time |
|
Workflow to export provisioning collections. Exports a complete privilege tree including roles, permissions and groups |
|
- |
Java, real-time |
|
Workflow to import collections. Imports a set of Java-based workflows, adapts and activates it. |
|
- |
Java, real-time |
|
Workflow to import provisioning collections. Imports the ProvisioningCollections.ldif file to a customer domain. To make this work you have to: - Create a new bind profile in the connected directory that binds to your customer domain - Use this bind profile in this workflow |
|
- |
Java, real-time |
|
Workflow to perform a joint backup of the Java-based repositories, and LDAP databases |