8.15 Placement - Subscriber Mirrored - LDAP Format

This rule places objects in the data store by using the mirrored structure in the Identity Vault from a specified point. Implement the rule on the Placement policy in the driver. You can implement the rule only on the Subscriber channel.

There are two steps involved in using the predefined rules: creating a policy in the Placement policy set and importing the predefined rule. If you already have a Placement policy that you want to add this rule to, skip to Importing the Predefined Rule.

8.15.1 Creating a Policy

  1. From the Outline view or the Policy Flow view, select the Subscriber channel.

  2. Select the Placement policy set in the Policy Set view, then click Create or add a new policy to the Policy Set icon Create or Add a New Policy icon to create a new policy.

  3. Click Create a new policy, then click Next.

  4. Name the policy.

  5. Use the default location or browse and select another location to place the policy in the driver.

    Create Policy Wizard
  6. Select Open Editor after creating policy, then click Next.

  7. Select DirXML Script for the type of policy, then click Finish.

  8. A file conflict window appears with the message “Before editing this item you need to save. Do you wish to save the editor’s changes and continue?” Click Yes. The Policy Builder is launched and the new Placement policy is saved.

  9. Continue with Importing the Predefined Rule.

8.15.2 Importing the Predefined Rule

  1. Right-click in the Policy Builder, then click New > Predefined Rule > Insert Predefined Rule Before or Insert Predefined Rule After.

  2. Select Placement - Subscriber Mirrored - LDAP format, then click OK.

  3. Expand the predefined rule.

    Placement - Subscriber Mirrored - LDAP format
  4. Edit the condition by double-clicking the Conditions tab.

  5. In the Value field, browse to the container in the source hierarchy where you want the object to be acted upon, then click OK.

  6. Edit the action by double-clicking the Actions tab.

  7. Delete [Enter base of destination hierarchy] from the Specify String field.

  8. Click the Edit the arguments icon Edit Arguments icon to launch the Argument Builder.

  9. Select Text in the noun list.

  10. Double-click Text to add it to the argument.

  11. In the editor, click the browse button, browse to the container in the destination hierarchy where you want the object to be placed, then click OK.

  12. Click Finish.

  13. Save the rule by clicking File > Save.

8.15.3 How the Rule Works

If the User object resides in the source hierarchy, then the object is placed in the mirrored structure from the Identity Vault. The placement starts at the point that the local variable dest-base is defined. It places the User object in the location of the unmatched source DN, dest-base. The rule uses LDAP format.