CA Identity Manager Implementation Guide - CA Technologies

Decide User Store RequirementsCA Audit ConsiderationsCA Audit is an audit management system that enables you to collect and storesecurity related data for auditing, reporting, compliance verification and eventmonitoring.To integrate with CA Audit, you install the iRecorder component when you installthe Identity Manager Server. The iRecorder retrieves events from CA IdentityManager. Based on policies in the CA Audit Policy Manager, the iRecorder ignoresthe event or routes it through to CA Audit.Decide User Store RequirementsAn Identity Manager implementation must include a user store that contains theuser identities that Identity Manager maintains. Typically, this is an existing userstore that an enterprise uses to store information about its users, such asemployees and customers.If your implementation includes provisioning, Identity Manager also requires aprovisioning directory that includes global users, which are associated withaccounts on endpoints such as Microsoft Exchange, Active Directory, and Ingres.How to Choose a User Store SolutionTo manage an existing user store, use CA Identity Manager to manage it, andthen create a separate Provisioning Directory. However, in implementationswhere you can choose a user store option, consider the key differences in thefollowing table.CapabilitySeparate UserStore andProvisioningDirectorySingle User Store andProvisioning DirectoryUser Object Support Yes Yes (custom schema)Group Object Support Yes Yes (custom schema)Group MembershipSupportOrganization ObjectSupportDirect ProvisioningSupportYesYesNoYes (proprietary model)NoYesChapter 4: Planning Your Implementation 49