Skip to main content
Version: On prem: 15.0.2

Management Agent for MIM Sync

The Management Agent applies a data model in the connector space that has three categories of object types:

  • Accounts
  • Resources
  • Resource Assignments

There can be any number of object types in the connector space. Each of them belongs to one of the categories mentioned above.

Object categories and their attributes

Resource Assignment

  • ObjectCategory
  • Key
  • Identity
  • IdentityId
  • Resource
  • ResourceId
  • System
  • SystemId
  • ResourceType
  • ResourceTypeId
  • AccountKey
  • AccountName
  • ValidFrom
  • ValidTo
  • Disabled
  • AttributeName
  • BundledAttributes
  • IdentityGlobId
  • ResourceTechName

Account

  • ObjectCategory
  • Key
  • Identity
  • IdentityId
  • Resource
  • ResourceId
  • System
  • SystemId
  • ResourceType
  • ResourceTypeId
  • AccountName
  • ValidFrom
  • ValidTo
  • Disabled
  • AttributeName
  • BundledAttributes
  • Resources
  • IdentityGlobId
  • ResourceTechName

Resource

  • ObjectCategory
  • Key
  • JoinKey
  • DisplayName
  • SystemId
  • System
  • AssignedTo
  • TechName

Description of the attributes

AttributeMIM Data typeMulti-valuedSupports deltaDescription
ObjectCategoryStringIs either:

Account
ResourceAssignment
Resource
KeyStringThe key is used as anchor attribute in the CS.

On Account and ResourceAssignment objects, the Key is the AssignmentKey of the CRA.

On Resource objects, the Key is the UID of the resource data object.
IdentityStringDisplayName of the identity.
IdentityIdReferenceUID of the identity data object.
ResourceStringDisplayName of the resource.
ResourceIdReferenceUID of the resource data object.
SystemStringDisplayName of the system.
SystemIdReferenceUID of the system data object.
ResourceTypeStringDisplayName of the resource type.
ResourceTypeIdStringUID of the resource type data object.

The data type is string as you normally don’t have resource types represented in the metaverse.
AccountKeyReferenceReference to an Account object.

See Key attribute.
AccountNameStringAccount name
ValidFromStringValidFrom of the CRA.
ValidToStringValidTo of the CRA.
DisabledBooleanDisabled flag of the CRA.
AttributeNameDepends on the RoPE attribute data typeYes (except if the data type is Boolean)Individual values for the provision attributes as specified on the resource type.

Each of the assignment attributes of the CARA or CPRA are represented as an attribute with name Attribute name.
BundledAttributesStringYesYesBundled values for the provision attributes as specified on the resource type.

Each value has the format Attribute name:[value]

The format of [value] depends on the data type of the attribute.

Example:

NAME:some name

DEADLINE:2014-05-05T22:00:00Z

ENABLED:true
ResourcesReferenceYesYesRefers a number of resource objects. The Account.Resources attribute is a mirror of the Resource.AssignedTo attribute.
JoinKeyStringJoinKey can be used to join the resource to a corresponding resource in the metaverse. The value of JoinKey is resolved in an extension.
DisplayNameStringDisplayName of the object.
AssignedToReferenceYesYesRefers a number of account objects. The Resource.AssignedTo attribute is a mirror of the Account.Resources attribute.
IdentityGlobIDCorresponds to the value of the Identity.IDENTITYID property in the Omada Identity Portal.
ResourceTechNameCorresponds to the value of the Resource.ROLEID property in the Omada Identity Portal.
TechNameCorresponds to the value of the Resource.ROLEID property in the Omada Identity Portal.