CA Identity Manager Implementation Guide - CA Technologies

More documents

Recommendations

Info

Decide User Store RequirementsCapabilityAdditional user storerequired forprovisioningRecommendednumber of usersSeparate UserStore andProvisioningDirectoryYesMillions of usersSingle User Store andProvisioning DirectoryNoTens of thousands of usersManaging Multiple User StoresAn enterprise may maintain multiple user stores. In each user store, the useridentity allows access to different corporate resources. You can use one of thefollowing methods to manage multiple user stores:■Use CA Identity Manager to directly manage the Provisioning Directory anduse the Provisioning Server to indirectly manage the users and accounts inthe different user stores.This approach allows you to:– Centrally manage users who can be assigned various enterpriseresources from one location– Implement common security and business rules across enterpriseresources. This may include the following:■■■■■Role-based access controlDelegated administrationTasks and screens that are customized based on the type ofcorporate identities they manageIdentity policies for rule-based identity managementCustomization and extensibilityNote: For information on these features, see the Administration Guide.■Create a separate Identity Manager environment to manage each user storeWith this method, information is not shared between environments.50 Implementation Guide
Select Components to InstallSelect Components to InstallThe following table lists the components to install to support the functionalitythat you want to implement.Note: For instructions on installing these components, see the InstallationGuide.If you want to...Install these componentsManage user identities in an existingcorporate user storeProvision accounts in endpointsystems■■■■■Identity Manager ServerProvisioning ServerProvisioning DirectoryProvisioning ManagerConnectors■Note: For instructions on installingconnectors, see the Connector Guidefor the type of connectors that youwant to install.Implement one or more of thefollowing features:■■■■Advanced authenticationAdvanced password policiesConsole skins for different sets ofusersConfigure locale preferences■■■■SiteMinder Policy ServerPolicy storeSiteMinder Web AgentIdentity Manager Extensions to thePolicy ServerNote: For instructions on installing theSiteMinder Policy Server and policystore, see the CA SiteMinder WebAccess Manager Policy ServerInstallation Guide. For instructions oninstalling the Web Agent, see the CASiteMinder Web Access Manager WebAgent Installation Guide.Generate reports on Identity ManageractivityIAM Report ServerChapter 4: Planning Your Implementation 51
Page 1 and 2: CA Identity ManagerImplementation G
Page 3: CA Product ReferencesThis document
Page 7 and 8: Task Processing and Performance ...
Page 9 and 10: Chapter 1: Managing Identities andA
Page 11 and 12: Admin Roles for User Account Manage
Page 13 and 14: Admin Roles for User Account Manage
Page 15 and 16: Password ManagementThe account temp
Page 17 and 18: CA RCM Integration■■Notificatio
Page 19: CA Enterprise Log Manager Integrati
Page 22 and 23: Complying with Business PoliciesThe
Page 24 and 25: Complying with Business PoliciesRep
Page 26 and 27: Transforming Data in the User Store
Page 28 and 29: Approving Business ChangesBusiness
Page 31 and 32: Chapter 3: Identity ManagerArchitec
Page 33 and 34: Identity Manager ComponentsFor exam
Page 35 and 36: Identity Manager ComponentsWhen you
Page 37 and 38: Identity Manager ComponentsCertain
Page 39 and 40: Identity Manager ComponentsWorkPoin
Page 41: Sample CA Identity Manager Installa
Page 44 and 45: Decide What to ManageHow to Configu
Page 46 and 47: Decide What to ManageAccount Templa
Page 48 and 49: Determine Audit RequirementsYou vie
Page 52 and 53: Decide Hardware RequirementsDecide
Page 54 and 55: Choose a Method to Import UsersAddi
Page 56 and 57: Choose a Method to Import UsersExec
Page 58 and 59: Develop a Deployment PlanSynchroniz
Page 60 and 61: Develop a Deployment PlanTo deploy
Page 62 and 63: Develop a Deployment PlanEnvironmen
Page 65 and 66: Chapter 5: Integrating with SiteMin
Page 67: Password Policies with SiteMinderCA
Page 70 and 71: Role OptimizationsRole Optimization
Page 72 and 73: Role OptimizationsObjectTypeBaseObj
Page 74 and 75: Role Optimizations■■Tune the us
Page 76 and 77: Role OptimizationsTo limit the numb
Page 78 and 79: Task Optimizations■A user accesse
Page 80 and 81: Task OptimizationsRelationship Tabs
Page 82 and 83: Task OptimizationsGuidelines for Op
Page 84 and 85: Guidelines for Group Member\Adminis
Page 86 and 87: Identity Policy Optimizations■An
Page 88 and 89: Identity Policy OptimizationsLimit
Page 90 and 91: Tuning for Provisioning ComponentsC
Page 92 and 93: Runtime Components TuningIdentity M
Page 94 and 95: Runtime Components TuningTuning JMS
Page 97 and 98: Chapter 7: Creating a Disaster Reco
Page 99 and 100: Define Disaster Recovery Requiremen
Page 101 and 102:
Develop Backup PlansMulti-Site Conn
Page 103 and 104:
Develop Restore ProceduresComponent
Page 105 and 106:
Develop Restore ProceduresRestore C
Page 107 and 108:
Test the Recovery PlanTest the Fail
Page 109 and 110:
Chapter 8: Transitioning From eTrus
Page 111 and 112:
eTrust Admin Management Interfacese
Page 113 and 114:
Batch Processing in Identity Manage
Page 115:
Next Steps■etautilYou use the eta
Page 118 and 119:
How Role Evaluation Affects Perform
show all

CA Identity Manager Implementation Guide - CA Technologies

Create successful ePaper yourself

Delete template?

Save as template?