Reconciliation.
Reconciliation is a process to create , modify or delete user accounts and user information. It is a process of comparing and synchronizing accounts information in target system with OIM. Data flows into Oracle Identity Manager from External Source.
->It is used by Oracle Identity Manager to find any identity - related activity on the target system .
->Synchronize Oracle Identity Manager user information with target account details .
->Some target systems push updated information in Oracle Identity Manager in real time . There are some connectors siebel connectors which are real time , where there is no need to run the job . Ther are online , means once you modify the target resource immediately
connector triggers the event and it is updated in OIM , it gets synchronized immediately . It depends upon the performance whether you require real time connectors or offline connectors .Running the jobs means offline synchronization.
->OIM polls other target systems periodically for any change in user identities .

Types of Reconciliation :
1) Trusted Reconciliation(Authoritative)

2) Target Reconciliation( Non Authoritative)

1)Trusted Reconcilitaion :
Process of loading identities into IDM is known as Trusted or Authoritative Reconciliation. In the process we load user profiles into IDM. User gets created into IDM.
->Used to create , modify and delete user identities in Oracle Identity Manager .
->Any target system can be configured for trusted reconciliation .
-> Generally , HR systems are designed as trusted sources for identity creation .
-> Target systems can be configured as trusted sources for a specific attribute or a set of attributes of the user account .
-> A trusted source can also be configured for a specific role or user type

2)Target Reconciliation :
Process of loading account profile into IDM is known as Target or Non Authoritative Reconciliation. In this process we load user’s account profile i.e. user’s target account information. In this reconciliation only Resource profile of user is created not user profile.
->Used to create modify and delete user target accounts in Oracle Identity Manager .
->Cannot create modfiy or delete OIM users identities .
->Resources assigned to OIM users are synchronized with target system accounts of the same users .
-> Changes made to the target system account are also made to resourcse allocated to OIM User during susbsequent reconciliation runs .

Modes of Reconciliation :
-> There are two modes of Reconciliation - Full(Snapshot) and Incremental reconciliation .
-> Full reconciliation fetches all target system accounts for processing during reconciliation .
-> Performed by defaullt during the first reconciliation run performed on a target system .
-> The reconciliation execution timestamp at which reconcilaition run begins is recorded in OIM .
-> Accounts that have been added , modified or deleted after the recorded time stamp are fetched in incremental reconciliation 

Kashif Baksh

Add comment