Start with: Common SQL pattern
First six fields can show one at a time when the previous is filled in
- SQL external system ID (required)
- SQL pattern: drop down with options below (show after external system selected)
- entitiesTable
- init start with membership structure to groupAttributes
- init start with group organization to flat
- init start with membershipDn to true
- entitiesTableWithAttributesTable
- init user attribute type: core
- init start with membership structure to groupAttributes
- init start with group organization to flat
- init start with membershipDn to false
- init start with membershipValue to subjectId
- entitiesTableWithAttributesTableAndMemberships
- init start with membership structure to entityAttributes
- init start with group object class to: top,groupOfNames
- init start with group membership attribute to: member
- init start with membershipDn to true
- entitiesTableMembershipsTable
- groupsTable
- init start with hasGroupsTable to true
- init start with hasGroupsAttributesTable to false
- init start with hasEntitiesTable to false
- init start with hasEntitiesAttributesTable to false
- init start with hasMembershipsTable to false
- groupsTableWithAttributesTable
- init start with membership structure to groupAttributes
- init start with group organization to bushy
- init start with membershipDn to true
- groupsTableWithAttributesTableAndMemberships
- init user attribute type: core
- init start with membership structure to groupAttributes
- init start with group organization to bushy
- init start with membershipDn to false
- init start with membershipValue to subjectId
- groupsTableMembershipsTable
- groupsTableEntitiesTableMembershipsTable
- membershipsTable
- init start with membership structure to groupAttributes
- init start with group object class to: top,posixGroup
- init start with group membership attribute to: member
- init start with membershipDn to true
- init start with idIndex attribute to gidNumber
- other
- proceed with screen
- entitiesTable
- User attributes type: drop down with options, required (show after ldap pattern)
- Only uses built in core attributes e.g. subjectId, subjectIdentifier0-2, email, name, description or translations of those (value: core)
- Needs other subject source attributes (value: subjectSource)
- Needs a SQL or LDAP filter, but not other subject attributes. If LDAP this is a different LDAP than the LDAP provisioning to (value: entityResolver)
- Needs subject source source attributes and SQL or LDAP filter. If LDAP this is a different LDAP than the LDAP provisioning to (value: subjectSourceAndEntityResolver)
- Membership structure (default to membershipObjects): entityAttributes, groupAttributes, membershipObjects, notApplicable
- if (user attribute type is subjectSource or subjectSourceAndEntityResolver)
- list those attributes and validate against subject source (textfield, comma separated attributes, required)
- Ask if need group link (boolean default false)
- Ask if has group table (default false)
- If has group table, ask for group table name (required, validate on submit)
- If has group table, ask for group primary key column (suggest group_id_index) (required, validate on submit)
- If has group table, ask for list of other group columns, suggest names: group_uuid, group_name, group_id_index, group_extension, group_display_name, group_display_extension, group_description
- If has group table, ask if has group attribute table (to store multi-valued attributes or memberships, not common)
- If has group attribute table, ask for group attribute table name (required, validate on submit)
- If has group attribute table, ask for column name which is foreign key to group table (suggest group_uuid) (required, validate on submit)
- If has group attribute table, ask for column name which is the attribute name (suggest attribute_name) (required, validate on submit)
- If has group attribute table, ask for column name which is the attribute value (suggest attribute_value) (required, validate on submit)
-
- group base OU, and validate against LDAP (required textfield)
- what attribute is RDN for groups? (add to attribute list if not in there) (required textfield)
- what is RDN value for groups? drop down required: extension, extensionUnderscoreIdIndex, idIndex, name, nameBackwardsUnderscoreMax64, other, script, uuid
- (if groupAttributes) membership attribute name
- (if not membershipValueDN): membership value (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- idIndex attribute: (optional textfield, add to attribute list if not in there)
- matching search attribute different than RDN or idIndex? boolean default false
- if (matching search attribute different than RDN or idIndex) matching search attribute name (textfield required)
- if (matching search attribute different than RDN or idIndex) matching search attribute value (dropdown required: extension, idIndex, name, other, script, uuid)
- object classes for groups (optional textfield, comma separated)
- list other group ldap attributes (not configured yet): (optional textfield comma separated)
- ask if allow group DN override (boolean default false)
- if (not entityAttributes and not membershipValueDN), ask if need entity link for another reason (boolean default false)
- if membershipValueDN or entityLink or entityAttributes: LDAP entity info
- entity base OU, and validate against LDAP (required textfield)
- change entities in LDAP (besides entity attribute if doing entity attributes)? (boolean default false)
- (if change entities) RDN attribute for entities (required textfield)
- (if change entities) RDN value for entities (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- (if entityAttributes) membership attribute name
- (if not membershipValueDN): membership value (drop down required) (dropdown required: extension, idIndex, name, other, script, uuid)
- (if change entities) matching search attribute different than RDN? boolean default false
- (if not change entities or matching search attribute different than RDN) matching/search attribute name (required textfield)
- (if not change entities or matching search attribute different than RDN) matching/search attribute value (drop down required) (other, script, subjectId, subjectIdentifier0, subjectIdentifier1, subjectIdentifier2)
- object classes for entities (optional textfield, comma separated)
- list other entity ldap attributes (not configured yet): (optional textfield)
- if entityAttributes and not membershipValueDN, ask if allow membership value override (boolean default false)
- add disabled full sync daemon? boolean default to true
- add disabled incremental sync daemon? boolean default to true