The main purpose of identity management systems is to manage user and role provisioning. Provisioning operations can act on Apache Syncope only or be propagated towards external resources as well (propagation). Provisioning will occur on a certain external resource every time the operation involves users or roles assigned to that resource.
Java Connector Server is a component that handles Java Connectors bundles. When a Java Connector Bundle is not directly executed into Provisioning System (Apache Syncope), you need to use a remote Java Connector Server.
Apache Syncope can manage users, groups and memberships (memberOf/members attribute) on external Active Directory via ConnId's Active Directory (JNDI) connector. Think you manage users and roles on Apache Syncope as centralized IdM, and have all these entities automatically kept in sync with your Active Directory users and groups: few simple steps onto the Apache Syncope administration console will help you to succesfully aim your goals ....
Before storing/propagating/synchronizing a specific user or role, a pre-processor can be called in order to allow any kind of manipulation before any actual operation takes place.
I've a keen interest in IAM solution also because I think that my first qualification is simply: IAM specialist. Today, googling idm open source I noticed that the first result occurrence (also in paid search results) is openiam identity manager, so, out of curiosity, I decided to install it.
Today we see how to create a user without saving the password in the Apache Syncope repository. The user password will be stored only on Active Directory.