CA Identity Manager Implementation Guide - CA Technologies

More documents

Recommendations

Info

Identity Manager ComponentsConnector XpressConnector Xpress is an Identity Manager utility for managing dynamicconnectors, mapping dynamic connectors to endpoints, and establishing routingrules for endpoints. You can use it to configure dynamic connectors to allowprovisioning and management of SQL databases and LDAP directories.Connector Xpress lets you create and deploy custom connectors without thetechnical expertise generally required when creating connectors managed by theProvisioning Manager.You can also set up, edit, and remove a connector server configuration (bothJava and C++) using Connector Xpress.The primary input into Connector Xpress is the native schema of an endpointsystem. For example, you can use Connector Xpress to connect to a RDBMS andretrieve the SQL schema of the database. You can then use Connector Xpress toconstruct mappings from those parts of the native schema that are relevant toidentity management and provisioning. A mapping describes how theprovisioning layer represents an element of the native schema.Connector Xpress generates metadata that describes, to a dynamic connector,the runtime mappings to a target system.The output of Connector Xpress is a metadata document produced when youcomplete your mappings. The metadata is an XML file that describes thestructure of your connector to the Java CS.It describes the Provisioning Server classes and attributes and how they aremapped to the native schema.The metadata is used to create dynamic endpoint types on one or moreProvisioning Servers.Note: For more information on using Connector Xpress, see the ConnectorXpress Guide, in the CA Identity Manager bookshelf.Additional ComponentsIdentity Manager includes some additional components, which support IdentityManager functionality. Some of these components are installed with IdentityManager and some must be installed separately.38 Implementation Guide
Identity Manager ComponentsWorkPoint WorkflowWorkPoint workflow engine and WorkPoint Designer are installed automaticallywhen you install Identity Manager.These components enable you to place an Identity Manager task under workflowcontrol, and to modify existing workflow process definitions or create newdefinitions.Note: For more information about workflow, see the Administration Guide.Provisioning ManagerThe Identity Manager Provisioning Manager manages the Provisioning Serverthrough a graphical interface. This is used for administrative tasks such asmanaging Provisioning Server options. In some cases, you may also use theProvisioning Manager to manage certain endpoint attributes, which you cannotmanage in the Identity Manager User Console.The Provisioning Manager is installed as part of the Identity ManagerAdministrative Tools.Note: This application runs on Windows systems only.For more information about the Provisioning Manager, see ProvisioningReference Guide.IAM Report ServerIdentity Manager provides reports that you can use to monitor the status of anIdentity Manager environment. To use the reports provided with IdentityManager, you install the IAM Report Server, which is included with IdentityManager.IAM Report Server is powered by Business Objects Enterprise XI. If you have anexisting Business Objects server, you can use that instead of the IAM ReportServer to generate Identity Manager reports.Note: For installation instructions, see the Installation Guide.Chapter 3: Identity Manager Architecture 39
Page 1 and 2: CA Identity ManagerImplementation G
Page 3: CA Product ReferencesThis document
Page 7 and 8: Task Processing and Performance ...
Page 9 and 10: Chapter 1: Managing Identities andA
Page 11 and 12: Admin Roles for User Account Manage
Page 13 and 14: Admin Roles for User Account Manage
Page 15 and 16: Password ManagementThe account temp
Page 17 and 18: CA RCM Integration■■Notificatio
Page 19: CA Enterprise Log Manager Integrati
Page 22 and 23: Complying with Business PoliciesThe
Page 24 and 25: Complying with Business PoliciesRep
Page 26 and 27: Transforming Data in the User Store
Page 28 and 29: Approving Business ChangesBusiness
Page 31 and 32: Chapter 3: Identity ManagerArchitec
Page 33 and 34: Identity Manager ComponentsFor exam
Page 35 and 36: Identity Manager ComponentsWhen you
Page 37: Identity Manager ComponentsCertain
Page 41: Sample CA Identity Manager Installa
Page 44 and 45: Decide What to ManageHow to Configu
Page 46 and 47: Decide What to ManageAccount Templa
Page 48 and 49: Determine Audit RequirementsYou vie
Page 50 and 51: Decide User Store RequirementsCapab
Page 52 and 53: Decide Hardware RequirementsDecide
Page 54 and 55: Choose a Method to Import UsersAddi
Page 56 and 57: Choose a Method to Import UsersExec
Page 58 and 59: Develop a Deployment PlanSynchroniz
Page 60 and 61: Develop a Deployment PlanTo deploy
Page 62 and 63: Develop a Deployment PlanEnvironmen
Page 65 and 66: Chapter 5: Integrating with SiteMin
Page 67: Password Policies with SiteMinderCA
Page 70 and 71: Role OptimizationsRole Optimization
Page 72 and 73: Role OptimizationsObjectTypeBaseObj
Page 74 and 75: Role Optimizations■■Tune the us
Page 76 and 77: Role OptimizationsTo limit the numb
Page 78 and 79: Task Optimizations■A user accesse
Page 80 and 81: Task OptimizationsRelationship Tabs
Page 82 and 83: Task OptimizationsGuidelines for Op
Page 84 and 85: Guidelines for Group Member\Adminis
Page 86 and 87: Identity Policy Optimizations■An
Page 88 and 89:
Identity Policy OptimizationsLimit
Page 90 and 91:
Tuning for Provisioning ComponentsC
Page 92 and 93:
Runtime Components TuningIdentity M
Page 94 and 95:
Runtime Components TuningTuning JMS
Page 97 and 98:
Chapter 7: Creating a Disaster Reco
Page 99 and 100:
Define Disaster Recovery Requiremen
Page 101 and 102:
Develop Backup PlansMulti-Site Conn
Page 103 and 104:
Develop Restore ProceduresComponent
Page 105 and 106:
Develop Restore ProceduresRestore C
Page 107 and 108:
Test the Recovery PlanTest the Fail
Page 109 and 110:
Chapter 8: Transitioning From eTrus
Page 111 and 112:
eTrust Admin Management Interfacese
Page 113 and 114:
Batch Processing in Identity Manage
Page 115:
Next Steps■etautilYou use the eta
Page 118 and 119:
How Role Evaluation Affects Perform
show all

CA Identity Manager Implementation Guide - CA Technologies

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?