User provisioning is performed by connecting Soffid agent with repositories. These agents can act in both directions, either creating or modifying user accounts on the managed system, or enrolling existing user accounts into Soffid.
User provisioning performance depends largely on the features and performance of the managed system. In a typical case, Soffid can provision up to 2000 identities per minute in active directory systems.
When the managed system must act as an authoritative source of identities, the agent may collect information regarding identities that should be incorporated into Soffid. These identities may optionally be subject to a evaluation and approval process.
The performance achieved to perform a full synchronization of an authoritative source is greater than 5000 identities per minute. Whether the managed system allows incremental synchronizations, or the number of identities were small, changes can be scheduled to be performed in real time.
Soffid currently has a number of standard connectors that integrates common user repositories such as:
- Active Directory.
- LDAP directories.
- JDBC data bases.
- ERP systems such as SAP R / 3 or Oracle eBusiness suite.
- HR applications such as Peoplesoft.
- Local accounts systems Windows, Linux and OS/400.
Within the configuration of these agents, administrator can define the correspondences between the mappings of Soffid attributes and managed system attributes, specifying the direction in which the information will flow, either output (Soffid to the managed system), input (system managed to Soffid) or bidirectional.
Additionally, the user can build their own agents in Java, implementing public interfaces defined by Soffid. These connectors are encapsulated in a JAR file to be uploaded to Soffid console without service interruption.