Review the following recommendations to ensure the best performance among the Identity Governance driver, Identity Governance, and Identity Manager components:
Before enabling reflection for an application, perform the following actions:
Configure the driver to allow User Add operations on the Publisher channel (synchronization)
Migrate identities that do not exist in Identity Manager from Identity Governance to the Identity Vault
For more information, see Section 7.5, Migrating User Objects to the Identity Vault.
If you enable reflection first, the process might generate a large number of synchronization events and assignment operations.
Tune the Identity Vault to index the attributes that the Identity Governance driver uses for matching a large number identities. For example, you should index the attributes in an identity management solution with more than 100,000 users. The driver runs policies to match attributes in the following order:
workforceID
Internet Email Address
Given Name + Surname
Review the migration queries to reduce the amount of data that the driver transfers through the Remote Loader and the Identity Manager engine.
Order your identity sources in Identity Governance such that the source collecting from Identity Manager is the first source to collect data. If you are using the Identity Manager Identities Collector, it must always be first in the list of collectors or user authorizations fail.
For more information, see Section 9.0, Creating and Monitoring Scheduled Collections and Section 8.1.2, Setting the Merge Rules for Publication.