IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Understanding and Automating erglobalID Generation in ISDI for Organizational Unit

  • 1.  Understanding and Automating erglobalID Generation in ISDI for Organizational Unit

    Posted 26 days ago

    Hello,


    I'm looking for information I couldn't find in IBM's documentation.
    I'm trying to automate the creation of organizational units via ISDI, so that the creation is reflected in LDAP.
    The issue I'm facing is related to the generation of the erglobalID. This ID is usually generated automatically when creating an identity, organizational unit, account, etc.
    I would like to understand the specifics of how the erglobalID is generated, depending on the object type (identity, organizational unit, account, etc.).


    Any insights or experience regarding this would be greatly appreciated.


    Thanks in advance!



    ------------------------------
    Mohamed El Harroudi
    ------------------------------


  • 2.  RE: Understanding and Automating erglobalID Generation in ISDI for Organizational Unit
    Best Answer

    Posted 23 days ago
      |   view attached

    You should not update ldap directly - that may cause inconsistency in the system - especially if you have multiple nodes.

    Instead you should use the APIs created for that purpose - the Java API you can find here : https://assets.madigansolutions.com/javadoc/tim5.0/com/ibm/itim/apps/identity/OrganizationalContainerMO.html - REST and WS/SOAP are in the examples.

    Here is a Connector (ISIMContainerConnector.jar) using the JAVA API (you will need to read the examples to configure it - but it should be straight forward from there and if you follow this guide : 

    https://www.ibm.com/support/pages/configuring-ibm-directory-integrator-websphere-client-identity-manager-virtual-appliance-java-apis/stub ) 

    There is a undocumented API to create erglobalids called com.ibm.itim.util.GUIDGenerator - the erglobalid is basically a random based on the current time.

    It can be used like this : 

    myGUID = com.ibm.itim.util.GUIDGenerator.getInstance();
Enrole.log("TEST",myGUID.getguidString());

     Spelling and syntax not guaranteed...

    HTH



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------

    Attachment(s)

    jar
    ISIMContainerConnector.jar   30 KB 1 version
    Original Message