Multiple accounts in one Custom Target System

Hello everyone,

In one of our Custom Target System one person can have multiple accounts, and when one of the groups associated is requested from IT Shop, it is automatically assigned to all of the accounts. In our scenario, we need to assign the selected group only to one of the accounts. We can add the selected account to the PersonWantsOrg, but how do we get what we want?

I think we need to know the process, script, procedure that writes to UNSAccountBInUNSGroupB from PersonWantsOrg.

I have seen some forum posts with the same question, but without the final answer andrea stefanini,p.noga did you get in?

Regards,

0 angela bajo over 4 years ago

I forgot the version: OneIM v.8.1.1
0 Barry Jackson over 4 years ago

Hi,

You want to use the concept called Match Pattern For Membership (Inheriting Group Memberships Based on Categories)

See this post in the external forum for some pointers: https://www.oneidentity.com/community/identity-manager/f/forum/22331/add-adsaccount-or-adsgroup-to-categories-based-on-template

The links are to V7 docs but the same information can be found in V8 - I just didn't find it yet!

I found the latest doc link: support.oneidentity.com/.../36

HTH, Barry.
- 0 angela bajo over 4 years ago in reply to Barry Jackson
  
  Hi Barry,
  
  In our case we can not categorize neither accounts nor groups, all groups should be able to be assign to all accounts, without restrictions or predefined categories.
  
  We have some published groups in the IT shop, one manager request one of these groups for one of his direct reports an we want that the group would be assigned to the selected account, not to all.
  
  Regards,
  - 0 Barry Jackson over 4 years ago in reply to angela bajo
    
    Hi,
    
    If you cannot use categories then you will need to introduce some customisation that allows the requester to select which account the request is for. You will also have to implement or adjust the backend fulfilment processes to support this.
    
    HTH, Barry.
  - 0 angela bajo over 4 years ago in reply to Barry Jackson
    
    Hi Barry,
    
    we have done the customizacion in the portal to achieve that the requester could select the desired account. Now we are trying to discover what processes or procedures we have to modify to achieve what we are looking for. Any clue about that?
    
    Thanks,
  - 0 Markus Weiss-Ehlers over 4 years ago in reply to Barry Jackson
    
    Or, you are using sub-identities and assign the accounts to those sub-identities. You are then able to request the groups for these sub-identities.
  - 0 angela bajo over 4 years ago in reply to Markus Weiss-Ehlers
    
    We are not considering the option of using sub-identities, because each identity could have up to five accounts in this particular CTS.
    
    Regards
  - 0 xd over 4 years ago in reply to angela bajo
    
    With sub-identity mode, you can have each of accounts correlated to one sub-identity.