Reverse Synchronization Type

Action in policy

Result

Comments

Account detection

Reject changes

The account is deleted or suspended.

The account is deleted if NEW_ACCOUNT_REJECTED_ACTION=DELETE under Manage Global Settings.

The account is suspended if NEW_ACCOUNT_REJECTED_ACTION=SUSPEND under Manage Global Settings (for endpoint types that support account suspension).

Account detection

Send to business engine processing

A new approval task is created.

If the approver rejects the task, the account is rejected.

If the account was not correlated and if the approver accepts the task, the account is assigned to the default user and is no longer detected as a new account.

If the account was not correlated and the user selects another user to which he "assigns" the account, and the approver accepts the task, the account is assigned to the user manually selected in the task and is no longer detected as a new account.

If the account was automatically correlated (suggested correlation that needs approval) and if the approver accept the task, the account is assigned to the automatically correlated user and is no longer detected as a new account.

Account Detection

Create User

A new corporate user and global user are created based on the account detected.

The new user's attribute values, such as first name, last name, and so on, are defined in the Provisioning Server configuration (attribute mapping). If a workflow process is defined for user creation, the process is triggered.

Attribute change detection

Reject changes

The value in the Identity Manager user store overrides the value in the endpoint.

This is true for any account attribute or HR attributes, such as department or site.

Attribute change detection

Send to business engine processing

The configured workflow process occurs.

The same approver as in a self-service task (such as Manage My RACF Account) needs to approve the task.