Chat now with support
Chat with Support

Identity Manager 8.2 - Administration Guide for Connecting to a Universal Cloud Interface

Managing Universal Cloud Interface environments Synchronizing a cloud application in the Universal Cloud Interface Provisioning object changes Managing cloud user accounts and employees Managing memberships in cloud groups Login information for cloud user accounts Mapping cloud objects in One Identity Manager
Cloud target systems Container structures Cloud user accounts Cloud groups Cloud system entitlements Cloud permissions controls Reports about objects in cloud target systems
Handling cloud objects in the Web Portal Basic data for managing a Universal Cloud Interface environment Configuration parameters for managing cloud target systems Default project template for cloud applications in the Universal Cloud Interface

Specifying server functions

NOTE: All editing options are also available in the Designer under Base Data > Installation > Job server.

The server function defines the functionality of a server in One Identity Manager. One Identity Manager processes are handled with respect to the server function.

NOTE: More server functions may be available depending on which modules are installed.
Table 45: Permitted server functions

Server function

Remark

Update server

This server automatically updates the software on all the other servers. The server requires a direct connection to the database server that One Identity Manager database is installed on. It can run SQL tasks.

The server with the One Identity Manager database installed on it is labeled with this functionality during initial installation of the schema.

SQL processing server

It can run SQL tasks. The server requires a direct connection to the database server that One Identity Manager database is installed on.

Several SQL processing servers can be set up to spread the load of SQL processes. The system distributes the generated SQL processes throughout all the Job servers with this server function.

CSV script server

This server can process CSV files using the ScriptComponent process component.

One Identity Manager Service installed

Server on which a One Identity Manager Service is installed.

SMTP host

Server from which One Identity Manager Service sends email notifications. Prerequisite for sending mails using One Identity Manager Service is SMTP host configuration.

Default report server

Server on which reports are generated.

Universal Cloud Interface connector

This server can connect to the Universal Cloud Interface Module.

Related topics

Configuration parameters for managing cloud target systems

The following configuration parameters are additionally available in One Identity Manager after the module has been installed.

Table 46: Configuration parameters for managing cloud target systems

Configuration parameters

Meaning

TargetSystem | CSM

Preprocessor relevant configuration parameter for controlling the database model components for the administration of the cloud target systems. If the parameter is set, the target system components are available. Changes to this parameter require the database to be recompiled.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

TargetSystem | CSM | Accounts

Allows configuration of user account data.

TargetSystem | CSM | Accounts | InitialRandomPassword

Specifies whether a random password is generated when a new user account is added. The password must contain at least those character sets that are defined in the password policy.

TargetSystem | CSM | Accounts |
InitialRandomPassword | SendTo

Employee to receive an email with the random generated password (manager cost center/department/location/business role, employee’s manager or XUserInserted). If no recipient can be found, the password is sent to the address stored in the TargetSystem | CSM | DefaultAddress configuration parameter.

TargetSystem | CSM | Accounts |
InitialRandomPassword | SendTo |
MailTemplateAccountName

Mail template name that is sent to supply users with the login credentials for the user account. The Employee - new user account created mail template is used.

TargetSystem | CSM | Accounts |
InitialRandomPassword | SendTo |
MailTemplatePassword

Mail template name that is sent to supply users with the initial password. The Employee - initial password for new user account mail template is used.

TargetSystem | CSM | Accounts | MailTemplateDefaultValues

Mail template used to send notifications about whether default IT operating data mapping values are used for automatically creating a user account. The Employee - new user account with default properties created mail template is used.

TargetSystem | CSM | Accounts |
PrivilegedAccount

Allows configuration of privileged user account settings.

TargetSystem | CSM | Accounts |
PrivilegedAccount |
SAMAccountName_Postfix

Postfix for formatting the login name of privileged user accounts.

TargetSystem | CSM | Accounts |
PrivilegedAccount |
SAMAccountName_Prefix

Prefix for formatting a login name of privileged user accounts.

TargetSystem | CSM | DefaultAddress

Default email address of the recipient for notifications about actions in the target system.

TargetSystem | CSM |
MaxFullsyncDuration

Maximum runtime of a synchronization in minutes. No recalculation of group memberships by the DBQueue Processor can take place during this time. If the maximum runtime is exceeded, group membership are recalculated.

TargetSystem | CSM | PersonAutoDefault

Mode for automatic employee assignment for user accounts added to the database outside synchronization.

TargetSystem | CSM | PersonAutoDisabledAccounts

Specifies whether employees are automatically assigned to disabled user accounts. User accounts are not given an account definition.

TargetSystem | CSM | PersonAutoFullSync

Mode for automatic employee assignment for user accounts that are added to or updated in the database by synchronization.

TargetSystem | CSM | PersonExcludeList

Listing of all user account without automatic employee assignment. Names are listed in a pipe (|) delimited list that is handled as a regular search pattern.

Example:

ADMINISTRATOR|GUEST|KRBTGT|TSINTERNETUSER|IUSR_.*|IWAM_.*|SUPPORT_.*|.* | $

The following configuration parameters are also required.

Table 47: Additional configuration parameters

Configuration parameters

Meaning

QBM | PendingChange

General configuration parameter for configuring pending changes.

QBM | PendingChange | LifeTimeError

This configuration parameter specifies the maximum retention period (in days) for failed provisioning processes. The default is 30 days.

QBM | PendingChange | LifeTimeRunning

This configuration parameter specifies the maximum retention period (in days) for open provisioning processes. The default is 60 days.

QBM | PendingChange | LifeTimeSuccess

This configuration parameter specifies the maximum retention period (in days) for successful provisioning processes. The default is 2 days.

Default project template for cloud applications in the Universal Cloud Interface

A default project template ensures that all required information is added in One Identity Manager. This includes mappings, workflows, and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.

Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the Synchronization Editor.

The project template uses mappings for the following schema types.

Table 48: Mapping Universal Cloud Interface schema types to tables in the One Identity Manager schema
Schema type in Universal Cloud Interface Table in the One Identity Manager Schema

UCIRoot

CSMRoot

UCIContainer

CSMContainer

UCIGroup

CSMGroup

UCIGroupInGroup

CSMGroupInGroup

UCIGroupHasItem

CSMGroupHasItem

UCIGroup1

CSMGroup1

UCIGroup1InGroup1

CSMGroup1InGroup1

UCIGroup2

CSMGroup2

UCIGroup2InGroup2

CSMGroup2InGroup2

UCIGroup3

CSMGroup3

UCIGroup3InGroup3

CSMGroup3InGroup3

UCIItem

CSMItem

UCIUser

CSMUser

UCIUserInGroup

CSMUserInGroup

UCIUserInGroup1

CSMUserInGroup1

UCIUserInGroup2

CSMUserInGroup2

UCIUserInGroup3

CSMUserInGroup3

UCIUserHasGroup

CSMUserHasGroup

UCIUserHasGroup1

CSMUserHasGroup1

UCIUserHasGroup2

CSMUserHasGroup2

UCIUserHasGroup3

CSMUserHasGroup3

UCIUserHasItem

CSMUserHasItem

QBMPendingChange

QBMPendingChange

QBMPendingChangeDetail

QBMPendingChangeDetail

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating