[Index]

Model: data/FlowThroughProvisioningCriteria

Flow Through Provisioning

Full HTML Help

Overview

Automate's flow through provisioning feature allows auto-provisioning of users and services during user sync from devices.

This topic describes the steps for setting up your system to enable a seamless sync in of users to Automate from the hierarchy where the sync source device is set up (typically, Customer level), and the flow through provisioning of services to users at your sites.

• To move users to sites, the flow through provisioning references move filter criteria, and attributes set up as Model Filter Criteria (such as a user's department, division or city address).

  Note

  The flow through provisioning uses the move filter criteria in the site defaults (SDD) to determine whether to move users to site. FTP will not run if the user is not moved to the site.

• To create a user and provision resources and services, the flow through provisioning references user profiles. See User profiles.

  Note

  Flow through provisioning (FTP) uses user profiles for provisioning, so you will need a user profile and Quick Add Group (QAG) with device configuration templates (CFTs) set up before using FTP.

• Each flow through provisioning criteria (one per customer) consists of one or more pairs of model filter criteria and a user profile combinations.

Related Topics

Model Filter Criteria in the Core Feature Guide

User profiles in the Core Feature Guide

LDAP Integration in the Core Feature Guide

Add CUCM Server in the Core Feature Guide

CUCM Configuration in the Core Feature Guide

Microsoft Overview in the Core Feature Guide

Sync to Site with Flow Through in the Core Feature Guide

Sync Webex App Users with Flow-through Provisioning in the Core Feature Guide

Global Settings in the Core Feature Guide

Site Defaults in the Core Feature Guide

User Roles in the Core Feature Guide

Flow through provisioning workflow

To access the flowcharts, view the topic via the release documentation at: https://documentation.voss-solutions.com/automate.html

Before you start: Add a server as sync source

Users are imported from the server sync source to the Customer level in Automate. The flow through provisioning is generic functionality and supports a number of scenarios, including Microsoft, LDAP, CUCM, Cisco Webex and other models (depending on predefined model criteria).

Step 1: Add model filter criteria

Flow through provisioning references model filter criteria set up for each user type (for example, Microsoft, LDAP, or CUCM).

When setting up the Model Filter Criteria, you will specify usage, either flow through provisioning, or move user:

• To move a user to the site on import, configure model filter criteria with Move User selected as the value for the Usage field.

• To provision a user once they're at the site, configure model filter criteria with Flow Through Provisioning selected as the value for the Usage field.

  Note

  • The flow through provisioning process runs only if the user is at the site.

Related topics

• Model Filter Criteria

Step 2: Add user profiles

Flow through provisioning uses the user profile to determine the services to be assigned to a user once they're moved to the site.

Related topics

• User profiles

Step 3: Add flow through provisioning criteria

Flow through provisioning criteria is a type of model filter criteria used for provisioning. One named flow through provisioning criteria can be added at each Customer level.

Each flow through provisioning criteria is a collection of one or more pairs of model filter criteria and user profile combinations. The flow through provisioning criteria defines how users are matched to both sites and user profiles, allowing the tool to seamlessly move users to the sites (based on model filter criteria) and to create a user and assign services from the user profile.

Flow through provisioning uses the first match to execute the move and service assignment operation.

You can use a single flow through provisioning criteria to match any number of user profiles for this customer and its sites. For example, if you have ten different user profiles, you can add ten pairs of model filter criteria and user profile combinations.

Before setting up flow through provisioning criteria, configure the following:

• Server sync source
• Model Filter Criteria
• User profiles

Step 4: Choose move criteria

To allow users to be moved in a flow through provisioning, you need to choose move filter criteria for the user type (Microsoft, LDAP, and/or CUCM). Move filter criteria defines how the system moves users to the correct site once they're synced in; that is, it matches each user to the relevant site.

Prerequisites:

• Server sync source
• Model Filter Criteria (set Usage field to Move User)
• User profiles
• Flow Through Provisioning Criteria

To choose move criteria ...

1. Select the relevant site hierarchy.
2. Go to the Defaults page.
3. On the Move Filter Criteria tab, choose the criteria for the user types you're importing (Microsoft, LDAP, and/or CUCM).
4. Save your changes.

Step 5: Enable flow through provisioning

Enabling your system for flow through provisioning in the Global Settings allows Automate to perform a seamless sync in, to move users to the correct site (based on move filter criteria and model filter criteria), and to provision these users with appropriate services (based on the user profile).

Prerequisites:

• Server sync source
• Model Filter Criteria
• User profiles
• Flow through provisioning criteria
• Move criteria selected

To enable flow through provisioning ...

1. Log in to the Admin Portal as Provider admin or higher.
2. Set the hierarchy to the level where the sync source device is installed. Typically, this is at the customer.
3. Go to Global Settings, then select the Flow Through Provisioning tab.
4. At Enable Move & Flow Through Provisioning, select Yes.
5. At Enable Move & Provisioning after Add Sync, select Yes.
6. At Flow Through Provisioning Criteria, choose the flow through provisioning criteria to use at the customer level (for all sites at the customer).
7. Save your changes.

Step 6: Sync with flow through provisioning

This section describes the general workflow in a generic sync with flow through provisioning.

You can run the sync directly, or via a schedule.

Ensure you have the following set up before a sync:

• Server sync source
• Model Filter Criteria
• User profiles
• Flow through provisioning criteria
• Move criteria selected

Sync with flow through provisioning workflow steps

The flow through provisioning workflow is executed per user and runs in parallel:

1. Imports user.

2. Creates a corresponding LDAP user (for LDAP scenario), and a local VOSS user.

3. Moves users to the sites (based on model filter criteria). If no criteria in place, user remains at Customer level.

4. Updates the user's role for the site.

5. Executes Add User from Profile to create the user, and checks the flow through provisioning criteria to match it to a user profile.

6. Provisions the users with appropriate services, from the user profile.

7. Sends a welcome email to users if the following applies:

   • The global setting to allow an email message to be sent to a user is enabled. See the Email Tab topic at Global Settings.
   • An SNMP server has bee set up. See Add a SMTP Server.
   • The user has an email address.

   See also Email HTML Templates.

You can monitor the progress of the transaction via the Transaction Log. When complete, verify the user's move and provisioning status:

1. Go to the Users list view and verify that synced in users are at the correct sites.
2. On the Users list view, check that users exist at the sites, with relevant services.

Flow Through Provisioning Criteria is a model where user criteria is stored for FTP. When a user is synced into the system and FTP is configured this data will be checked to see if the user that is synced in matches the criteria or not. If it matches the appropriate Subscriber from Profile mechanism is called to automatically provision the user.

Model Details: data/FlowThroughProvisioningCriteria