Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.4 - Administration Guide for Connecting to Custom Target Systems

Table of Contents

Managing custom target systems

One Identity Manager users for managing custom target systems

Setting up script-controlled data provisioning in a custom target system

Creating the scripts for data provisioning in a custom target system Setting up a server for data provisioning to a custom target system

Master data for a Job server Specifying server functions

Post-processing outstanding objects

Configuring target system synchronization Post-processing outstanding objects

Basic data for custom target systems

Setting up account definitions

Creating an account definition

Master data for an account definition

Creating manage levels

Master data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning an account definition to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning an account definition to a custom target system Deleting an account definition

Password policies for user accounts

Predefined password policies Using password policies Editing password policies

General master data for password policies Policy settings Character classes for passwords

Custom scripts for password requirements

Script for checking passwords Script for generating a password

Password exclusion list Checking a password Testing password generation

Initial password for new user accounts Email notifications about login data Target system managers Target system types Displaying custom schema extensions for custom target systems

Setting up a custom target system

General master data for a custom target system Customizing data synchronization for a custom target system Specifying categories for inheriting groups Alternative column names

Container structures in a custom target system

Master data for a container

User accounts in a custom target system

Linking user accounts to employees Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Entering user account master data

User account master data

Additional tasks for managing user accounts

Overview of the user account Changing the manage level of user accounts Assigning groups directly to user accounts Assigning extended properties Assigning permissions controls

Automatic assignment of employees to user accounts

Editing search criteria for automatic employee assignment

Disabling user accounts Deleting and restoring user accounts

Groups in a custom target system

Group master data Assigning group to user accounts

Assigning groups to departments, cost centers and locations Assigning groups to business roles Assigning user accounts directly to a group Adding groups to system roles Adding groups to the IT Shop

Additional tasks for managing groups

Overview of groups Adding groups to groups Effectiveness of group memberships Group inheritance based on categories Assigning extended properties Assigning permissions controls

Entering permissions controls

Permissions control master data Additional tasks for permissions controls

Permissions control overview Assigning permissions controls to user accounts Assigning permissions controls to groups

Reports about custom target systems

Overview of all assignments

Configuration parameters for managing custom target systems

Configuration parameters for managing custom target systems

The following configuration parameters are additionally available in One Identity Manager after the module has been installed.

Table 36: Configuration parameters for managing custom target systems
Configuration parameter	Meaning
TargetSystem \| UNS	Preprocessor relevant configuration parameter to control the component parts for the managing custom target systems. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled.
TargetSystem \| UNS \| Accounts	This configuration parameter permits configuration of user account data.
TargetSystem \| UNS \| Accounts \| InitialRandomPassword	This configuration parameter specifies whether a random generated password is issued when a new user account is added. It must contain at least those character sets set in the configuration subparameters.
TargetSystem \| UNS \| Accounts \| InitialRandomPassword \| SendTo	This configuration parameter specifies to which employee the email with the random generated password should be sent (manager cost center/department/location/business role, employee’s manager, or XUserInserted). If no recipient can be found, the password is sent to the address stored in the configuration parameter "TargetSystem \| UNS \| DefaultAddress".
TargetSystem \| UNS \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplateAccountName	This configuration parameter contains the name of the mail template sent to provide users with the login data for their user accounts. The Employee - new user account created mail template is used.
TargetSystem \| UNS \| Accounts \| InitialRandomPassword \| SendTo \| MailTemplatePassword	This configuration parameter contains the name of the mail template sent to provide users with information about their initial password. The Employee - initial password for new user account mail template is used.
TargetSystem \| UNS \| Accounts \| MailTemplateDefaultValues	This configuration parameter contains the mail template used to send notifications if default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used.
TargetSystem \| UNS \| CreateNewRoot	The configuration parameter specifies whether new target systems can be added. If this parameter is set, custom target systems can be added.
TargetSystem \| UNS \| DefaultAddress	The configuration parameter contains the recipient's default email address for sending notifications about actions in the target system.
TargetSystem \| UNS \| PersonAutoDefault	This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization.
TargetSystem \| UNS \| PersonAutoDisabledAccounts	This configuration parameters specifies whether employees are automatically assigned to disable user accounts. User accounts do not obtain an account definition.
TargetSystem \| UNS \| PersonAutoFullSync	This configuration parameter specifies the mode for automatic employee assignment for user accounts added to or updated in the database through synchronization.
TargetSystem \| UNS \| PersonExcludeList	List of all user accounts for which automatic employee assignment should not take place. Names are listed in a pipe (\|) delimited list that is handled as a regular search pattern. Example: ADMINISTRATOR\|GUEST\|KRBTGT\|TSINTERNETUSER\|IUSR_.\|IWAM_.\|SUPPORT_.\|.\$

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center