A virtual system is not directly connected for online management. A virtual system is basically only a registration mode, where for each system in which a change is generated an implementation request (notification) is assigned to a particular administrator. The administrator must make sure that the change is made to the target system. In other words, IdM "knows" what accounts and permissions the user should have on the system, but on the real system this is executed by an implementer (administrator). The reason may be the need to manage a large number of systems without the need for demanding integration.
The usage and configuration of virtual systems is described in the Admin tutorial.
After the request for updating a virtual system is created, the notification is sent to all implementers.
For virtual systems, a new connector called virtual-system-basic (BasicVirtualConnector.class) was devised. This connector provides an interface for external communication with a virtual system.
Connector following operations of the 'czechidm' connector framework:
Before any virtual ystem is deleted in the CC module, it's necessary to call the VS module and enforce the deletion of all connected entities (on the deleted system).
For this is used 'SystemEventType.DELETE' event and processor 'system-delete-processor'.
The sequence of deleting a VS module: