CA Identity Manager Implementation Guide - CA Technologies

Choose a Method to Import UsersExecute Identity Policies on Imported UsersAn identity policy is a set of business changes that occur when a user meets acertain condition or rule. These changes can include assigning or revoking roles(including provisioning roles for users in the provisioning directory), assigning orrevoking group membership, and updating attributes in a user profile.You can use identity policies to apply changes to user accounts after they havebeen imported to a new user store.This section describes methods for executing identity policies for imported usersin one or two steps.One-Step ApproachYou can use the following import methods to execute identity policies on usersthat you import into a new user store in a single step:■■■Bulk Loader in the User ConsoleCreate User Task Execution via TEWSInbound SynchronizationTwo-Step ApproachImport Users Through the Provisioning ServerUsing a two step approach, you first import users and then execute identitypolicies against the those users. You can use this method when CA IdentityManager manages users in the Provisioning Server. This method may providemore flexibility, depending on your import requirements.1. Use one of the import tools for adding users into the Provisioning Directory.2. Invoke the Identity Manager Synchronize User Task through TEWS on eachof the imported users.The Provisioning Server includes bulk import options for adding and managingusers in the Provisioning Directory. The following tables describe the methods forimporting users into the Provisioning Directory.Method Features LimitationsBatch utility(etautil)A command line interfaceutility that allows you tomanage objects in theProvisioning Directory■Currently supportedfor Windows systemsonly56 Implementation Guide