One Identity Quick Connect Overview
About One Identity Quick Connect
Features and benefits
Deploying One Identity Quick Connect Sync Engine
Bidirectional synchronization
Delta processing mode
Synchronization of group membership
Windows PowerShell scripting
Attribute synchronization rules
Rule-based generation of distinguished names
Scheduling capabilities
Extensibility
Technical overview
Licensing
Installation steps
Upgrading from an earlier version
Silent installation
Communication ports
Getting started
Quick Connect Administration Console
Connections to external data systems
Workflows tab
Sync History tab
Connections tab
Mapping tab
Password Sync tab
Configuring diagnostic logging
Steps to synchronize identity data
External data systems supported out of the box
Synchronizing identity data
Working with ActiveRoles Server
Working with Quest One Identity Manager
Using remote connectors
Creating a connection
Renaming a connection
Deleting a connection
Modifying synchronization scope for a connection
Using connection handlers
Specifying password synchronization settings for a connection
Creating a Quest One Identity Manager connection
Working with One Identity Manager
Step 1: Provide access to Identity Manager DLLs
Step 2: Configure a connection to Quest One Identity Manager
Modifying a Quest One Identity Manager connection
Quest One Identity Manager Connector configuration file
Getting started with identity data synchronization
Managing synchronization workflows
Mapping objects
Creating a synchronization workflow
Running a synchronization workflow
Managing workflow steps
Running a workflow manually
Running a workflow on a recurring schedule
Disabling a workflow run schedule
Renaming a synchronization workflow
Deleting a synchronization workflow
Creating a provisioning step
Creating an updating step
Creating a deprovisioning step
Modifying a step
Using workflow alerts
General Options tab
Source tab
Target tab
Provisioning Rules tab
Deprovisioning Rules tab
Updating Rules Tab
Step Handlers tab
Deleting a step
Changing the order of steps in a workflow
Generating object names by using rules
Modifying attribute values by using rules
Using value generation rules
Using workflow step handlers
Example: Synchronizing group memberships
Example: Synchronizing multivalued attributes
About mapping objects
Steps to map objects
Automated password synchronization
Step 1: Create mapping pairs
Step 2: Create mapping rules
Step 3 (optional): Change scope for mapping rules
Step 4: Run map operation
Steps to unmap objects
About automated password synchronization
Steps to automate password synchronization
Managing Capture Agent
Synchronization history
Installing Capture Agent manually
Using Group Policy to install Capture Agent
Uninstalling Capture Agent
Managing password sync rules
Creating a password sync rule
Deleting a password sync rule
Modifying settings of a password sync rule
Fine-tuning automated password synchronization
Configuring Capture Agent
Step 1: Create and link a Group Policy object
Step 2: Add administrative template to Group Policy object
Step 3: Use Group Policy object to modify Capture Agent settings
Configuring Quick Connect Service
Specifying a custom certificate for encrypting password sync traffic
Step 1: Obtain and install a certificate
Step 2: Export custom certificate to a file
Step 3: Import certificate into certificates store
Step 4: Copy certificate’s thumbprint
Step 5: Provide certificate’s thumbprint to Capture Agent
Step 6: Provide certificate’s thumbprint to Quick Connect Service
Using PowerShell scripts with password synchronization
About synchronization history
Viewing workflow history
Viewing mapping history
Searching synchronization history
Cleaning up synchronization history
Scenarios of use
About scenarios
Scenario 1: Provision users from a .csv file to an Active Directory domain
Appendices
Step 1: Create a workflow
Step 2: Create a provisioning step
Step 3: Run the created provisioning step
Step 4: Commit changes to Active Directory
Scenario 2: Use a .csv file to update user accounts in an Active Directory domain
Step 1: Create an updating step
Step 2: Run the created updating step
Step 3: Commit changes to Active Directory
Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain
Step 1: Create connection to One Identity Manager
Step 2: Configure One Identity Manager modules, Custom Target System and Container Information
Step 3: Create Workflow for Provisioning
Step 4: Create Provisioning
Step 5: Specify the synchronization rules
Step 6: Execute Workflow
Step 7: Commit changes to One Identity Manager
Step 8: Verify on One Identity Manager
Scenario 4: Deprovisioning between One Identity Manager Custom Target Systems and an Active Directory domain
Scenario 5: Provisioning of Groups between One Identity Manager Custom Target Systems and an Active Directory domain
Scenario 6: Enabling Delta Sync mode between One Identity Manager Custom Target Systems and an Active Directory domain
Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain
Scenarios of use > Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain
Out of the box, One Identity Quick Connect Sync Engine includes the One Identity Manager connector, which allows you to access the One Identity Manager. In this scenario, the basic purpose for the Quick Connect One Identity Manager connector is to use the connector for target systems where there is no existing native One Identity Manager connector.
Administrators can create or configure multiple Custom Target Systems in One Identity Manager. Each Target System has entities such as User Accounts, Groups, Container Structure, and so on.
|
|
NOTE: One Identity Manager does not have any specific table space for target systems that do not have a native One Identity Manager connector. The data synchronized is placed in the One Identity Manager tablespace where the tables starts with UNS.. and end with B, referred as UNS..B tables. |
The following scenario shows how to use the Quick Connect One Identity Manager Connector to synchronize data between One Identity Manager Custom Target Systems and Active Directory domain.
This scenario includes the following steps:
- Step 1: Create connection to One Identity Manager
- Step 2: Configure One Identity Manager modules, Custom Target System and Container Information
- Step 3: Create Workflow for Provisioning
- Step 4: Create Provisioning
- Step 5: Specify the synchronization rules
- Step 6: Execute Workflow
- Step 7: Commit changes to One Identity Manager
- Step 8: Verify on One Identity Manager
Step 1: Create connection to One Identity Manager
Scenarios of use > Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain > Step 1: Create connection to One Identity Manager
To create a new connection to One Identity Manager:
- In the Quick Connect Administration Console, open the Connections tab.
- Click Add connection, and then use the following options:
- Connection name. Type a descriptive name for the connection.
- Use the specified connector. Select One Identity Manager Connector.
- Click Next.
- On the Specify connection settings page, use the following options:
- Application Server URL. Specify the address of the One Identity Manager application server to which you want to connect.
- Authentication module. Identifies the One Identity Manager authentication module to be used to verify the connection’s user ID and password.
- User name. Specify the user ID for this connection.
- Password. Specify the password of the user ID for this connection.
- Test Connection. Click to verify the specified connection settings.
- Click Next.
Step 2: Configure One Identity Manager modules, Custom Target System and Container Information
Scenarios of use > Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain > Step 2: Configure One Identity Manager modules, Custom Target System and Container Information
|
|
NOTE: The One Identity Manager target systems and One Identity Manager containers are applicable only for the Target System Base module. |
To select the One Identity Manager modules, Target Systems, and Containers:
- Select the required One Identity Manager modules.
- Select Target System Base module to synchronize data to One Identity Manager custom target systems (UNS..B tables). This enables you to select the target object types such as UNSAccountB, UNSGroupB, and so on.
- Select the required One Identity Manager target system, for example Azure.
- Select the required One Identity Manager container, for example Test AD.
- Click Finish to create a connection to One Identity Manager.
Step 3: Create Workflow for Provisioning
Scenarios of use > Scenario 3: Synchronizing data between One Identity Manager Custom Target Systems and an Active Directory domain > Step 3: Create Workflow for Provisioning
To create a workflow for provisioning data synchronization to One Identity Manager:
- Start the One Identity Quick Connect Administration Console.
- Open the Workflows tab, and then click Add workflow.
- Type a descriptive name, for example AD to D1IM Sync for the workflow being created, and then click OK to create the workflow.