After successful deployment, information about your subscription is displayed in the One Identity Manager On Demand portal along with the connection details of your One Identity Starling deployment. You need this information for accessing One Identity Manager On Demand.
To display the information
-
Log in to the One Identity Starling portal.
-
On the home page, in the My Services section, click the One Identity Manager On Demand (Starling Edition) tile.
Administrative system user
The cccAdmin system user is an administrative system user. You can use this system user to log on to the tools for the first time and to configure One Identity Manager On Demand. Provided are:
-
User name: cccAdmin
-
Password: Password for the cccAdmin system user.
Synchronization user
The Synchronization system user has the necessary permissions to set up and run target system synchronizations using an application server. Provided are:
-
User name: Synchronization
-
Password: Password for the Synchronization system user.
Database connection data
It is generally recommended that on-premises components use the application server to connect to the database. However, some components require a direct database connection. For more information, see Which components and front-ends work with an application server? in the Online documentation on the Support Portal.
The following information is provided for the direct database connection:
-
Database address: Public endpoint of the Azure SQL Managed Instance.
-
Database name: Name of the database.
-
User name: SQL Server Login name of the <database name>_cccConfig user.
-
Password: Password for the user's SQL Server login.
NOTE: The database login password expires after 42 days after which, you must change the password.
IMPORTANT: Access to the database is limited solely to the IP addresses and IP ranges that have been granted access.
To share IP addresses and IP ranges
-
On the Database Access tile, click Manage Database Access and enter one or more public IP addresses or IP ranges (separated by commas) or specify the CIDR notation.
Encryption key for database encryption
To synchronize a target system you must declare the database key in the One Identity Manager On Demand Service. The file with the private key must exist in the server's installation directory on all servers with an active One Identity Manager On Demand Service.
For more information, see Tips for working with an encrypted One Identity Manager database in the Online documentation on the Support Portal.
Job server user
Login data for displaying status information and the cloud Job server's log file in Job Queue Info or if there is a direct connection to the cloud Job server's endpoint URL. Provided are:
-
User name: JobServer
-
Password: Password for the user.
Endpoint URLs
-
Web Portal / API Server
This endpoint is used deploy the Web Portal, the Password Reset Portal and the Operations Support Web Portal. In addition, you gain access to the API Server's administration portal and the API Server's API documentation.
-
App Server
This endpoint is used to deploy the application server. You need the URL to connect to the application server in the on-premises components. Furthermore, administrative system users can see the application server's status as well as the application server's REST API documentation through this endpoint.
-
Job server
This endpoint is used to deploy the cloud Job server's status information and log file. You require the Job server user login to access it.