I have a question about how to use the Person.UID_PersonMasterIdentity column.
The information I found is: “The column Person.UID_PersonMasterIdentity is only shown if an employee has several identities to manage.” (Source:
https://support.oneidentity.com/technical-documents/identity-manager/8.0.1/configuration-guide/81#TOPIC-909964). This is a default column that comes with the software.
To my understanding, if a person has several management accounts, his UID will be in the column of Person.UID_PersonMasterIdentity in all the accounts.
Is this the right way to use the Person.UID_PersonMasterIdentity column? Do you have any new idea?
You will find more information around main identities and the identity types in the documentation.
Especially the properties Identity and Main Identity are of interest.
Explains how the configuration parameter QER\Person\MasterIdentity\UseMasterForAuthentication affects authentication.
But to your question, main and sub-identities can be used if an identity has more than one account in a target system that needs to be treated differently in terms of inheritance or request handling and if all other configuration options like using account/group categories or inheritance blocking are not sufficient.
Another use-case is when your physical identities (Persons) have different jobs in your company and therefore would need different meta- or business-data like department memberships etc. Again, inheritance plays a major role here.