The ILM identity, account, and permission collectors use unique authentication methods. In addition to specifying the authentication method, you might need to change attribute mapping when configuring the collector template. Like SCIM collectors, ILM collectors also support singular attributes, complex singular attributes, complex multi-valued attributes, and extensions. If your application supports any other attributes or extensions different from those mentioned in the SCIM protocol, you can change the attribute mapping in the template by using delimiters. You can use ‘:’ (colon) for attributes, for example, emails:work:value, and ‘+’ (plus) for extensions, for example, urn:ietf:params:scim:schemas:extension:enterprise:2.0:User+department.
To successfully map accounts and permissions to identities, you may specify any unique account attribute as the mapping attribute. For example, userName, emails:primary:value. Because ILM collectors also use SCIM protocols, they record in batches of up to 999 records, and the default batch collection session timeout value is set to 60 seconds.