5. Automated User Provisioning

Provisioning users means creating accounts in one or more applications that are in the users’ corporate landscape. Namely, this involves creating an account and pushing out appropriate user profile information and entitlements.

As creating users manually is time-consuming, laborious and poses security threats, OpenIAM implements automated provisioning for time efficiency and to simplify the provisioning process.

Bonjour,

Je cherche a connecter OpenIAM avec Apache Guacamole mais en suivant la documentation je ne trouve pas le connecteur groovy dans /usr/local/openiam/connectors/bin j’ai uniquement

/usr/local/openiam/connectors/start.sh
/usr/local/openiam/connectors/shutdown.sh.

Je cherche a ce que quand un utilisateur as le role “access Guacamole” un compte soit créer sur le système cible et que le compte soit enregistrer sur OpenIAM et relier a la personne. comment c’est possible ? J’ai beau lire et relire la doc je ne comprend pas comment cela est possible.

Pour clarifier un peu cela, Je provisionne OpenIAM grâce a une CSV , dans se CSV j’ai un role que l’on appelera “access Guacamole” et si un utilisateur a se role il faut créer un utilisateur sur Apache Guacamole avec certaines information comme le prenom et l’email, sauf que je n’ai pas compris comment fonctionner le connecteur groovy script,
est ce que je dois faire utiliser un connecteur avec un script groovy qui vas utiliser l’API de guacamole ?
est ce que je dois utiliser une synchronisation ?
est ce que je dois utiliser une Busines rules ?

Hello @MarVI,

Please download the required .jar file from the following link:
https://download.openiam.com/release/enterprise/4.2.1.12/connectors/script-connector-rabbitmq.jar

Once downloaded, please move the .jar file to:

/usr/local/openiam/connectors/bin/

If the bin folder does not exist, you should create it manually.

After placing the file, update the permissions and ownership using the commands below:

chmod 755 bin
sudo chmod 600 /usr/local/openiam/connectors/bin/script-connector-rabbitmq.jar
sudo chown openiam:openiam /usr/local/openiam/connectors/bin/script-connector-rabbitmq.jar

Please let me know once this has been completed or if any issues arise during the process.

Thanks.

Hello ameet_shah

Thank you for the link and the explanation.
I have a question: we are using the Community version, but the link you provided includes the word “Enterprise.” Are we allowed to use it even though we are not on the Enterprise version?

Also, I can’t find the list of download links for the connectors available for the Community version.

I have also performed the steps you recommended — I successfully moved the connector with the correct permissions.

Hello @MarVI,

Yes, you are certainly free to use it. Previous versions of our Enterprise Edition eventually become Community – you can find a more detailed explanation at this link that compares both editions: OpenIAM | Community vs Enterprise Edition

I will post the 4.2.1.12 connectors below:

ADP

AWS

Boomi

Box

Active Directory

Azure AD Graph

Azure

D365FO

Dynamics365

Exchange

MicrosoftPsGraph

MSSQL

WinLocal

Freshdesk

Freshservice

Google

IPA

JDBC

Kronos

Lastpass

LDAP

Linux

Oracle

Oracle EBS

Oracle IDCS

Postgres

Rexx

Salesforce

SAP S4 Hana

SCIM

Script

Tableau

Thales

Workday

Thank you for the list of connector links available for the Community Edition.
I wasn’t able to find the download list on the OpenIAM page.
I’ll follow your advice — I’ll move the connector to the connectors/bin/ directory and assign the correct permissions.