Skip to content
Valera V Harseko edited this page Jun 6, 2024 · 9 revisions

OpenIDM 4.5 Samples Guide https://github.com/OpenIdentityPlatform/OpenIDM/wiki/old/OpenIDM-4.5-Samples-Guide.pdf

sample ID Description
audit-jms-sample JMS Audit Sample - Show Audit Events Published on a JMS Topic.
audit-sample demonstrates configuring a MySQL database to receive the audit logs for access, activity, sync, and recon using the OpenICF ScriptedSQL connector. It can be used alongside any of the other OpenIDM samples by copying the accompanying files into the respective directories.
customendpoint illustrates the configuration of a custom endpoint, and the structure of custom endpoint scripts
fullStack demonstrates how to use OpenIDM together with OpenAM and OpenDJ, showing how the entire Open Identity Platform Stack can be used to maximize identity and access management (IAM) functionality. Any application for which your users need access can be secured with OpenAM, and the data for those users can be maintained with OpenIDM.
getting-started Getting Started how OpenIDM reconciles user data between two data stores
historicalaccountlinking shows you historical account linking between OpenIDM's managed users and a local LDAP directory server, such as OpenDJ.
infoservice
internal-common
kerberos demonstrates management of kerberos users via OpenIDM internal managed user objects. The provisioner for this sample assumes that OpenIDM is running on a host separate from the kerberos host.
misc
multiaccountlinking illustrates how OpenIDM addresses links from multiple accounts to one identity
multiplepasswords shows you how to set up multiple passwords for OpenIDM's managed users internal repository and how to sync them each to different LDAP targets
powershell2AD The tools/ folder contains a bunch of samples for the OpenICF PowerShell Connector.
powershell2AzureAD demonstrate the capabilities of the Azure AD Powershell Connector. In addition, this will also show how these scripts get applied, in OpenIDM, with a mapping from 'AzureAD User Accounts and Groups' to 'Managed Users and Roles'
provisioners example configuration files for many different OpenICF connectors. The goal is for these to aid in the process of creating a new OpenIDM project configuration. It is expected that these will need to be updated in various ways to make them work with the particular remote system in question.
roles available in the sub-directories provide all the information you need to manage Roles in OpenIDM, via either REST or via the Administrative UI
sample1 demonstrates reconciliation between an external XML file and the OpenIDM internal repository, with data flowing from the XML file into the internal repository.
sample2 shows you reconciliation between the OpenIDM internal repository and a local LDAP directory server, such as OpenDJ, with data flowing from OpenDJ into the internal repository. No changes are pushed from OpenIDM to OpenDJ.
sample2b shows you reconciliation between the OpenIDM internal repository and a local LDAP directory server, such as OpenDJ, with data flowing from OpenDJ into the internal repository, and from the internal repository into OpenDJ.
sample2c same as sample 2b except that it focuses on one special attribute, ldapGroups, which is used to synchronize LDAP group membership.
sample2d same as sample 2c except that it focuses on synchronizing LDAP groups.
sample3 demonstrates creating a new custom scriptedSQL connector, using the custom-scripted-connector-bundler-4.0.0-SNAPSHOT.jar that is included in the tools directory of the OpenIDM zip file. The sample relies on the new custom connector that you will create with the connector bundler. It provides an example configuration and a handful of Groovy scripts that are used to communicate with an SQL server.
sample5 demonstrates flowing data between external resources. It simulates two diectory resources using XML files. It is different from sample4 in that it routes changes through managed/user, rather than having them directly mapped to each other. It also demonstrates the use of a reconciliation report delivered via email.
sample5b demonstrates flowing data between external resources just as in the regular sample 5 on which it is based. It simulates two directory resources using XML files. It extends sample 5 in that it configures a compensation script that attempts to ensure either all the synchronization or none of the synchronization is performed after making a change to a managed user.
sample6 demonstrates use of two real LDAP connections, and both reconciliation and LiveSync. The configurations provided are tailored for working with Microsoft Active Directory and ForgeRock OpenDJ, however they could be easily changed to work with any standard LDAP servers.
sample7 demonstrates using scripting to expose users according to a SCIM-like schema.
sample8 demonstrates logging capabilities available to OpenIDM scripts, providing you an alternative method for debugging your scripts.
sample9 demonstrates how to perform an asynchronous action from a reconciliation.
schedules
scriptedJMSSubscriber demonstrate using a Scripted JMS Message Handler to perform CRUDPAQ operations by subscribing to a ActiveMQ message queue
scriptedazure demonstrates how to use Groovy to connect to AD Graph API. This sample enables the basic create, read, update, and delete (CRUD) operations for groups and users. This sample requires a fresh install of OpenIDM.
scriptedcrest2dj demonstrates how to use Scripted CREST to connect to OpenDJs REST API. This sample enables the basic create, read, update, and delete (CRUD) operations for groups and users.
scriptedrest2dj demonstrates how to use Scripted REST to connect to OpenDJs REST API. This sample enables the basic create, read, update, and delete (CRUD) operations for groups and users.
security
syncfailure contain fragments to add to provisioner configuration to enable the sync-failure handling supported by OpenIDM.
taskscanner
trustedservletfilter demonstrates how to use a custom servlet filter and the "Trusted Request Attribute Auth Module" in OpenIDM to let the servlet filter perform authentication against another service.
usecase This section describes a number of sample workflows, that demonstrate typical use cases for OpenIDM. The use cases, provided in /path/to/openidm/samples/usecase, work together to describe a complete business story, with the same set of sample data. Each of the use cases is integrated with the Self-Service UI
workflow demonstrates a typical use case of a workflow for provisioning new users and the self-service UI to finalize their account. It is designed to simulate an employee requesting an outside contractor be granted access to the system (in this case, the system is OpenIDM's repository and a "remote" datasource represented by an xml file).

Clone this wiki locally