CA Identity Manager Implementation Guide - CA Technologies

ContentsChapter 1: Managing Identities and Access 9User Management and Application Access ......................................................... 9Role-Based Entitlements ........................................................................ 10Admin Roles for User Account Management ...................................................... 11Profile Management at the Attribute Level.................................................... 12Workflow Approval of Admin Tasks .......................................................... 13Provisioning Roles for Additional Accounts ....................................................... 14Password Management .......................................................................... 15Self Service Options for Users ................................................................... 15Identity Manager Customization and Extensibility ................................................ 16CA RCM Integration ............................................................................. 17CA Enterprise Log Manager Integration .......................................................... 18CA Enterprise Log Manager Reports .......................................................... 19Chapter 2: Addressing Business Needs 21Processing Business Changes.................................................................... 21Complying with Business Policies ................................................................ 22Compliance Reports ......................................................................... 23Enforcing Segregation of Duties Requirements ................................................... 25Transforming Data in the User Store ............................................................. 26Logical Attribute Handlers ................................................................... 26Applying Custom Business Logic ................................................................. 27Business Logic Task Handler Considerations .................................................. 28Workflow Process Considerations ............................................................ 28Approving Business Changes .................................................................... 28Chapter 3: Identity Manager Architecture 31Identity Manager Components................................................................... 31Servers ..................................................................................... 31User Store and Provisioning Directory ........................................................ 32Databases .................................................................................. 34Connector Components ..................................................................... 35Additional Components ...................................................................... 38Sample CA Identity Manager Installations ........................................................ 40Installation with Provisioning Components ................................................... 40Installation with SiteMinder Policy Server .................................................... 41Contents 5