HelloID-Conn-Prov-Target-DormakabaExos

ℹ️ Information
This repository contains the connector and configuration code only. The implementer is responsible to acquire the connection details such as username, password, certificate, etc. You might even need to sign a contract or agreement with the supplier before implementing this connector. Please contact the client's application manager to coordinate the connector requirements.

Table of contents

• Introduction
• Getting started
  • Connection settings
  • Prerequisites
  • Remarks
• Setup the connector
• Getting help
• HelloID Docs

Introduction

HelloID-Conn-Prov-Target-DormakabaExos is a target connector. DormakabaExos provides a set of REST API's that allow you to programmatically interact with it's data. The connector manages Account Management. Authorization Management is out of scope.

Getting started

Connection settings

The following settings are required to connect to the API.

Setting	Description	Mandatory
UserName	The UserName to connect to the API	Yes
Password	The Password to connect to the API	Yes
BaseUrl	The URL to the API	Yes

Configuration Settings

• Make sure to set the Concurrent Action limited to one and runs on a local agent server with access to the Application Server. Due to a maximum number of logins.

Prerequisites

• HelloID Agent installed with access to the application server.

Remarks

• The webservice does not support creating disabled accounts. An additional web call is required to disable/block the created accounts. The created accounts are disabled afterward. The accounts that are correlated will not be disabled. (This can be changed of course)
• During the development of the connector, I experience an error with the certificate. In order to make the connector work, you must bypass the CertificateCheck. Which you can do as follows in Powershell 5.1:

# Ignore certificate validation
Add-Type @'
using System.Net;
using System.Security.Cryptography.X509Certificates;
public class TrustAllCertsPolicy : ICertificatePolicy {
    public bool CheckValidationResult(
        ServicePoint srvPoint, X509Certificate certificate,
        WebRequest request, int certificateProblem) {
        return true;
    }
}
'@
[System.Net.ServicePointManager]::CertificatePolicy = [TrustAllCertsPolicy]::new()

Creation / correlation process

The connector will verify if an account must be either created or correlated. You can change this behavior in the create.ps1 by setting the following boolean value to true: $updatePerson = $true. This leads to that the correlated account is updated in the create script.

Correlation

Correlation is done based on the: PersonalNumber

Setup the connector

How to setup the connector in HelloID. Are special settings required. Like the primary manager settings for a source connector.

Getting help

For more information on how to configure a HelloID PowerShell connector, please refer to our documentation pages

If you need help, feel free to ask questions on our forum

HelloID docs

The official HelloID documentation can be found at: https://docs.helloid.com/