RSA Governance & Lifecycle Data Processors: Basics
a year ago
Article Number
000073034
Resolution

Data processors have always existed in RSA Governance & Lifecycle to allow manipulation of data during various phases of collections or SoD processing. In the past, it required sys access on the AVDB database and a tool like SQL developer to add custom logic to these extension points.

Pre 7.5.2

The table below lists some of the common extension points

Pre_ID_Unification_HandlerAny action needed post identity data collection but before unification. Mostly used to manipulate the T_DC_SOURCEDATA_USER table
Post_ID_Unification_HandlerAny action that needs to be performed after the identities have been collected, unified and persisted in the system
Pre_Supervisor_ResolutionAny action that needs to be performed after the identities have been collected, but before supervisor references are resolved
Pre_ADC_HandlerAny action to be performed post account data collection but before processing.
Post_Account_Data_Load_HandlerAction to be taken once account data has been collected and persisted in the system
Post_MAEDC_Load_HandlerAny action needed post multi-app EDC run
Post_Process_SoD_ViolationsActions to be taken post SoD rules have been evaluated and violations generated

 

7.5.2 and above

With RSA Governance & Lifecycle Cloud (or 7.5.2 on premise), RSA has made available all these extension points from the UI, making it very simple to add and maintain these custom extensions.

To enable usage of processors, the following system settings must be set.

custom.enableCustomPostProcessingScript = true

Once enabled, the "Pre Custom Processing" and "Post Custom Processing" options will be available in specific configuration areas.

Identity CollectorsAny action needed before or after identity data collection but before unification.
UnificationAny action that needs to be performed before or after identity unification (Pre Process Script / Post Process Script)
Account Collectors (ADC)Any action to be performed before or after account data collection.
Entitlements Collectors (EDC)Any action to be performed before or after entitlements data collection.
Role Collectors (RDC)Any action to be performed before or after role data collection.
Multi-App CollectorsSimilar to ADC / EDC / RDC
Data Access CollectorsNA
App Metadata CollectorsNA