Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 9.1 - Administration Guide for Connecting to Custom Target Systems

Table of Contents

Managing custom target systems

One Identity Manager users for managing custom target systems Configuration parameters for managing custom target systems

Setting up scripted data provisioning in a custom target system

Creating the scripts for data provisioning in a custom target system Job server for provisioning data in a custom target system

General main data of Job servers Specifying server functions

Post-processing outstanding objects

Adding custom tables to the target system synchronization Post-processing outstanding objects

Managing user accounts and employees

Account definitions for user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to custom target systems Deleting account definitions

Assigning employees automatically to user accounts

Editing search criteria for automatic employee assignment Finding employees and directly assigning them to user accounts Changing manage levels for user accounts Assigning account definitions to linked user accounts

Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one employee Providing administrative user accounts for several employees

Privileged user accounts

Setting deferred deletion for custom target system user accounts

Managing assignments of groups and system entitlements

Specifying types of system entitlements in use Assigning groups and system entitlements to user accounts in One Identity Manager

Prerequisites for indirect assignments of groups and system entitlements to user accounts Assigning groups to departments, cost centers, and locations Assigning system entitlements to departments, cost centers, and locations Assigning groups to business roles Assigning system entitlements to business roles Adding groups to system roles Adding system entitlements to system roles Adding groups to the IT Shop Adding system entitlements to the IT Shop Assigning user accounts directly to a group Assigning user accounts directly to a system entitlement Assigning groups directly to user accounts Assigning system entitlements directly to a user account

Effectiveness of memberships in groups and system entitlements Inheriting groups and system entitlements based on categories Overview of all assignments

Login information for user accounts

Password policies for user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Editing the password excluded list Verifying passwords Testing password generation

Initial password for new user accounts Email notifications about login data

Mapping custom target system objects in One Identity Manager

Custom target system identifiers

General main data for custom target systems Customizing data synchronization for custom target systems Defining categories for inheriting groups and system entitlements Specifying alternative column names

Container structures in custom target systems

Main data for containers

User accounts in custom target systems

Creating and editing user accounts User account main data Assigning extended properties to user accounts Assigning permissions controls to user accounts Disabling user accounts Deleting and restoring user accounts Displaying the user account overview

Groups in custom target systems

Main data for groups Assigning groups to groups Assigning extended properties to groups Assigning permissions controls to groups Displaying the group overview

System entitlements in custom target systems

System entitlement main data Assigning system entitlements to system entitlements Assigning extended properties to system entitlements Displaying system entitlement overviews

Permissions controls in custom target systems

Main data for permissions controls Assigning user accounts to permissions controls Assigning groups to permissions controls Displaying the permissions control overview

Reports about custom target systems

Treatment of custom target system objects in the Web Portal Basic configuration data for custom target systems

Target system managers Target system types for custom target systems Configuring display of custom schema extensions for custom target systems

Configuration parameters for managing custom target systems

Disabling user accounts

The way you disable user accounts depends on how they are managed.

Scenario:

The user account is linked to employees and is managed through account definitions.

User accounts managed through account definitions are disabled when the employee is temporarily or permanently disabled. The behavior depends on the user account manage level. Accounts with the Full managed manage level are disabled depending on the account definition settings. For user accounts with a manage level, configure the required behavior using the template in the UNSAccountB.AccountDisabled column.

Scenario:

The user accounts are linked to employees. No account definition is applied.

User accounts managed through user account definitions are disabled when the employee is temporarily or permanently disabled. The behavior depends on the QER | Person | TemporaryDeactivation configuration parameter

If the configuration parameter is set, the employee’s user accounts are disabled when the employee is permanently or temporarily disabled.
If the configuration parameter is not set, the employee’s properties do not have any effect on the associated user accounts.

To the user account when the configuration parameter is disabled

In the Manager, select the Custom Target Systems > <target system> > User accounts category.
Select the user account in the result list.
Select the Change main data task.
On the General tab, set the Account is disabled option.
Save the changes.

Scenario:

User accounts not linked to employees.

To disable a user account that is no longer linked to an employee

In the Manager, select the Custom Target Systems > <target system> > User accounts category.
Select the user account in the result list.
Select the Change main data task.
On the General tab, set the Account is disabled option.
Save the changes.

For more information about deactivating and deleting employees and user accounts, see the One Identity Manager Target System Base Module Administration Guide.

Related topics

Deleting and restoring user accounts

NOTE: As long as an account definition for an employee is valid, the employee retains the user account that was created by it. If the account definition assignment is removed, the user account that was created from this account definition, is deleted.

You can delete a user account that was not created using an account definition through the result list or from the menu bar. After you have confirmed the security alert the user account is marked for deletion in the One Identity Manager. The user account is locked in One Identity Manager and permanently deleted from the One Identity Manager database and the target system depending on the deferred deletion setting.

For more information about deactivating and deleting employees and user accounts, see the One Identity Manager Target System Base Module Administration Guide.

To delete a user account that is not managed using an account definition

In the Manager, select the Custom Target Systems > <target system> > User accounts category.
Select the user account in the result list.
Click in the result list.
Confirm the security prompt with Yes.

To restore a user account

In the Manager, select the Custom Target Systems > <target system> > User accounts category.
Select the user account in the result list.
Click in the result list.

Related topics

Displaying the user account overview

Use this task to obtain an overview of the most important information about a user account.

To obtain an overview of a user account

In the Manager, select the Custom Target Systems > <target system> > User accounts category.
Select the user account in the result list.
Select the User account overview task.

Groups in custom target systems

Groups and system entitlements represent the objects used in the target system to control access to target system resources. A user account obtains the required permissions for accessing target system resources through its memberships in groups and system entitlements.

To create a group

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Click in the result list.
On the main data form, edit the main data of the group.
Save the changes.

To edit group main data

In the Manager, select the Custom Target Systems > <target system> > Groups category.
Select the group in the result list.
Select the Change main data task.
On the main data form, edit the main data of the group.
Save the changes.

Related topics

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center