!!What is an association?
Associations are the mechanism used by Identity Manager to establish and maintain a linkage between an object in the Identity Vault and an application object. The shim provides a unique key value for each application object and the Identity Manager Engine manages the storage of those key values in the Identity Vault.

A shim's responsibility with respect to associations is to provide a unique key value for each object and to notify the Identity Manager Engine whenever something happens that affects that unique key. In practice this means:
* Provide the unique key value for the object whenever communicating any information about the object to the Identity Manager Engine (events and queries).
* Report to the Identity Manager Engine whenever the unique key value of a relevant object changes using <modify-association>.
* Report to the Identity Manager Engine the unique key value of an object created as a result of processing and <add> command in the SubscriptionShim using <add-association> in the result document returned from the add processing.


!!Warning
Novell has no KNOWN public publication as to the the details of this attribute or the attribute's syntax.

We show here what we have learned along the way from empirical evidence and from others.

!!DirXML-Associations
The DirXML-Associations attribute is applied to entries (like users) and indicates the status of the synchronization for any given driver. 



The available DirXML-Associations Attribute State values are:
||Code||Description||LDAP search Filter
|0|Disabled|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#0#)
|1|Processed|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#1#*)
|2|Pending|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#2#")
|3|Manual|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#3#)
|4|Migrate|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#4#*)
|4278190086|Any Value|(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#4278190086#*)
|*|(Not present) No Association|(!(DirXML-Associations=cn=MyDriverName,cn=DriverSetName,ou=services,o=baseorg#4278190086#*))


!!Tools for modification of Associations
* [Association Modifier|http://www.novell.com/coolsolutions/tools/15754.html|target='_blank']

!! Determining DirXML Associated Entries
You can use [LDAPSEARCH] to [Determine the State of DirXML-Associations]

!! [Working with DirXML-Associations in Policies]
How to [Working with DirXML-Associations in Policies]
!!! Attribute Details
The DirXML-Associations attribute uses the [path syntax|2.16.840.1.113719.1.1.5.1.15]

!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]