Often, CzechIdM transforms data from a source system to a managed system. For example CzechIdM wants to fill Active Directory's attribute diplayName that has the format <firstName + LastName>. CzechIdM offers using a transformation script during Synchronization and Provisioning.

Filling one attribute from 2 entity (identity in our case) attributes, the script is simple:

entity.firstName + " " + entity.lastName

There is a convenient way of how to use transformation scripts. When connecting a system, it is possible to use bundled scripts in so called CzechIdM scripts library. CzechIdM administrators can also add new scripts to the library or change current scripts there.

In fact, all default scripts that are available in GUI after CzechIdM installation, were loaded into application during its previous start. They meet XML format and file incorporates the script body (groovy), script privileges and its purpose. So if you want to track changes on your scripts e.g. with git, this is the best way.

• Transformation scripts - Creating scripts and working with their library

• Groovy scripts and their authorization