Enabling policy associations for a domain
A policy association provides a means of creating many-to-one mappings in situations where associations between user identities and an Enterprise Identity Mapping (EIM) identifier do not exist.
You can use a policy association to map a source set of multiple user identities (rather than a single user identity) to a single target user identity in a specified target user registry. Before you can use policy associations, however, first ensure that you enable the domain to use policy associations for mapping lookup operations.
To enable mapping policy support to use policy associations for a domain, be connected to the EIM domain in which you want to work and have EIM administrator access control.
To enable mapping lookup support to use policy associations for a domain, complete these steps:
- Expand Network > Enterprise Identity Mapping > Domain Management.
- Right-click the EIM domain in which you want to work and select Mapping Policy....
- If the EIM domain you want to work with is not listed under Domain Management, add an EIM domain to the domain management folder.
- If you are not currently connected to the EIM domain in which you want to work, connect to the EIM domain controller. (The Mapping Policy... option is not available until you connect to the domain.)
- On the General page, select Enable mapping lookups using policy associations for domain.
- Click OK.
You must enable mapping lookups and the use of policy associations for each target registry definition for which there are policy associations defined. If you do not enable mapping lookups for the target registry definition, that registry cannot participate in EIM mapping lookup operations. If you do not specify that the target registry can use policy associations, then any defined policy associations for that registry are ignored by EIM mapping lookup operations.
Parent topic:
Managing Enterprise Identity Mapping domains
Related concepts
EIM mapping policy support and enablement