Framework for Connected and Non Connected systems

Belkast Consulting have development a reusable Framework which simplifies the integration of both Connected and Non Connected Systems with respect to NetIQ IDM. By using this Framework, you can implement the same application permission logic regardless of whether the System is connected via an IDM Connector or is completely ‘stand alone’. What is the difference between a Connected and a … Read More

Tag node position in XDS document

The following style-sheet processes each <status> node present within an XDS document, and tags each node with the position of that node. For example, if the XDS document contains 3 <status> nodes, the 1st node will be rewritten as <status position=”0″> etc. The code listed below makes use of the XSLT function preceding-sibling in order to figure out at what … Read More

Avoid multiple mapping-table queries

The mapping-table functionality in Novell IDM is a great feature to store ‘IF A THEN RETURN B’ results. Unfortunately, this is as far as the logic can be stretched. Basically, the mapping-table allows data to be stored and retrieved based on only one condition. Therefore, it is not possible to say ‘IF A AND B THEN RETURN C’. There is, however, … Read More

Using DXCMD to initiate a migrate

Some people are blissfully unaware that there is a very powerful command line tool that ships with NetIQ IDM. That tool is dxcmd, and it can be used to start and stop Drivers, change Driver startup mode, start Driver Jobs, and start Driver migrations (the purpose of this post). Belkast recently worked with a so called seasoned IDM consultant who had never heard … Read More

ECMAScript to generate a UUID

The code shown below was used in a recent project in order to generate a Unique Identifier when a User created a new Service Provider definition from within a User Application Workflow. When the Service Provider feed was consumed by the JMS Connector, the Connector checked the metadata present in the Identity Vault against the UUID sent as part of … Read More

Keep track of comments in the RBPM workflow

This article describes how one can keep track of comments which have been entered into one or more forms during the NetIQ User Application request process. This is helpful if you want to display a ‘running commentary’ of the previously entered comments on each new form when it is presented to the User. For instance, during the request process, the … Read More

The format of Novell Query Processor

The format for the Novell Query Processor is shown below, along with a description of the parameters and a few examples.

The parameters are described below: scope – “entry”, “subtree”, or “subordinates” association – association value to use for query srcDN/destDN – src-dn or dest-dn value to use for query – depends on $srcQueryProcessor or $destQueryProcessor className – object … Read More

XPATH to strip all but 1st instance

The following snippet of an XSLT stylesheet shows how to remove everything from an XDS document except for the 1st node. This code is implemented as part of the Secondary Account Management Loopback Connector when: A Resource is assigned, revoked, or deleted The Object concerned has more than one Secondary account already assigned As you can probably gather, the number … Read More

IDM, reading the Driver filter

Sometimes you might want to read the Driver filter and process the data. The code below shows how to accomplish this: Set a node-set local variable for the Driver DN (not shown) Query the Driver, and read three attributes. One of the attributes read is the DirXML-DriverFilter attribute Set a node-set local variable for the Filter. The DirXML-DriverFilter attribute is … Read More

Using a loopback to handle default values

It is best practice to implement most of the ‘lifecycle’ logic in a Loopback Connector when receiving data from an authoritative source. Some examples are shown below: Initial assignment of a password Termination and rehire of an employee Transfer of an employee Assignment of Group(s) on Creation Email notification and auditing on Creation Assignment and re-assignment of Manager