CA Identity Manager Implementation Guide - CA Technologies

Develop a Deployment Plan■■Delegated administration for user, group, and organization objectsDelegated administration for role administrationAfter each deployment stage, be sure to evaluate performance and makeadjustments before proceeding to the next stage. Optimizing Identity Manager(see page 69) provides information on performance, tuning, and scalability.Deploy Self-Service and Password ManagementDeploy self-service tasks and password management before deploying otherIdentity Manager features for the following reasons:■■■Self-service tasks and password management are easy to deploy andprovide significant value quickly.These features are independent of the delegated administration model andcan be reconfigured as needed to address changing business needs.These features typically generate the highest volume of tasks that IdentityManager processes on a regular basis. Because of this, they provide a way totest the scalabilty of your implementation before you deploy additionalfeatures.To deploy self-service tasks, you complete the following steps:1. Configure the self-registration task.This is a public task, which is enabled by default during installation. Toconfigure this task, you add or remove fields from the defaultself-registration task, as needed.2. Deploy the Self Manager role.The member rule for this role should be configured to apply to all users, orshould include a member rule that automatically assigns the role to newusers. For example, you can create a member rule that assigns the SelfManager role to all full-time employees. When a user self-registers, IdentityManager can set the employee type to full-time (by using a logical attributehandler, or business task handler). The user meets the criteria in themember rule and receives the Self Manager role automatically.Note: When you configure member rules for the Self Manager role, do notallow administrators to add or remove role members. Since the role isassigned automatically, there is no need for an administrator to explicitlyassign the role.Chapter 4: Planning Your Implementation 59