Symantec IGA

usecase: when user is coming from csv, he must have custom userid

issue:user is created with userid(fullname) in provisining directory,and when user is going to create in IDM a custom userid is generated.
here the userid were different in both provisioning directory,user directory

Ex:firstname,lastname,fulname
test,user,testuser
In provisoning directory:global username=testuser
In user Directory:userid=tuser(custom userid generation)

What we Want:custom userid must be same in both the directories
Is there anyway to do custom logic at before creating global user (or) when a user is coming from flatfile can we restrict the user not to create as global user and create directly in idm

and for the above usecase we are adding few enhancements like ,

 adding provisoning role to user which is coming from flat file through policy express,
Issue:in view submitted task,it is showing that assign provisioning role event is completed
but unable to see the role at users profile.

What Version of the product is this in?

It's in 14.1

Are  you using explore and correlate to create the global user in the provisioning server/directory?

If so, do not do this, as you get the problem that you have.

Instead, create the user through the Identity Manager front end (I assume you're using bulk upload of the CSV file) with the custom user id (either in the file or by IM logic). Ensure that the user gets at least one provisioning role during initial creation. It can be an empty role without account template. That way the user will be created in the Provisioning Server with the same user id.

For your initial on-boarding, the accounts already exist in the endpoints (most likely AD). So once you've uploaded the users, you can now do an explore and correlate without creating any new global users. You should be able to correlate the endpoint accounts to the newly created global users.

we have tried with bulk load csv,we dont have any problems.
but our use case is not that one
we must load the users from flat file connector,as when we do by using this we are facing the issues mentioned above?

Thanks in Advance

Whatever way you do it, you must have the same unique user id in the Identity Manager user store and also in the Provisioning Server. Otherwise the users won't match.

When you say that you have to load the users from a flat file connector, are you talking about using an explore and correlate of the flat file for the initial load? Or will all new users also be loaded from the flat file connector via explore and correlate?

Note that it's generally not recommended to use explore and correlate for the on-going new user process. One reason being that you won't detect any leavers that way. Instead, joiner, mover and leaver requests should come in through the Identity Manager front-end.

If you're just talking about the initial load, then you should do an explore and correlate where you correlate to existing global users, which you've previously created to have a matching user id to the Identity Manger user store. You should be able to use some correlation logic to match up the users in the Provisioning Server with the accounts coming in through the flat-file connector.

Thanks for the response.
i have an other usecase like
 i need to set manager based on the selected org which is drop down in profile screen

if i select org=x , set  manager=y

else if i select org=x1 ,set manager=y1

if a person selects org x automatically it has to populate manager=y using java script or java
how can we  do this usecase?

can u please share the code of java or js using BLTH