Introduction

The primary purpose of identity management systems is to manage data belonging to users; it is common practice in such systems to define as well entities called roles that helps in defining and enforcing security policies. In addition to this, Syncope explicitly represents the fact that users can be assigned to roles by mean of memberships.

...

• key is a string label (i.e. Surname)
• Wiki Markup_values_ is a (possibly singleton) collection of data (i.e. \ [Doe\] but also \ [john.doe@syncope.apache.org, jdoe@gmail.com\])

The type of values that can be assigned to each attribute is defined via schemas.

...

One of most important features is about to link such attributes to external resources (LDAP server, Database, ...) so that propagation and synchronization can take place effectively.

Image Modified

Mapping purposes

...

• SYNCHRONIZATION - mapping item will be considere considered just during synchronization.
• PROPAGATION - mapping item will be considere considered just during propagation.
• BOTH - mapping item will be considere considered always.