CA Identity Manager Implementation Guide - CA Technologies

Develop a Deployment PlanSynchronize Global Users with the Identity Manager User StoreAfter you import users into the Provisioning Server, you can use the followingmethods to add those users to the Identity Manager user store:■Inbound SynchronizationInbound Synchronization keeps Identity Manager users up to date withchanges that occur in the Provisioning Directory. Changes in the ProvisioningDirectory include those made using Provisioning Manager or systems withconnectors to the Provisioning Server.Note the following when using inbound synchronization to import users:– In the Identity Manager Management Console, you can customize howthe attributes from the inbound request are mapped to attributes in theIdentity Manager task.Note: For more information, see the Administration Guide.– Consider which Provisioning Server changes require synchronizationwith the corporate user store. Synchronizing a large number of changesmay impact performance and scalability.■Provisioning Roles and Account TemplatesThe Provisioning Server can manage accounts in the Identity Manager userstore using provisioning roles and account templates. This requires that amanaged endpoint, which points to the Identity Manager user store has beenacquired and the appropriate account templates and roles exist. In this case,global users created through one of the options described in Import UsersThrough the Provisioning Server (see page 56) can be assigned aprovisioning role that creates the user account in the Identity Manager userstore.Develop a Deployment PlanWhen planning a large implementation, you should deploy CA Identity Managerfunctionality in stages. The following deployment order allows you to gainsignificant value from CA Identity Manager quickly, evaluate the changing needsof your implementation over time, and carefully construct your environment forbest performance and scalability:■■■Self-service and password managementIdentity policiesWorkflow approvals58 Implementation Guide