Enterprise Single Sign-On 9.0.2 - One Identity Enterprise Access Management Console Administration Guide

Adding or removing a user from a group

Subject

The console allows you to add or remove users and access points from groups directly through the interface, without using a third-party group management console.

You can perform this task in two ways:

• From a user, as detailed in Procedure#1 below.
• From a group, as detailed in Procedure#2 below.

Before starting

• You have delegated the task Modify the membership of a group to the Organization for which you want to manage group memberships. For more details, see One Identity EAM Installation Guide.
• You have the right Group: Add/Remove member in your administration profile (the management of administration profiles is described in Section Managing Administration Profiles).

Procedure#1

1. In the tree structure of the Directory panel, select the wanted user.
   • The Information tab appears.

     

2. Use the Add and Remove buttons to add or remove the user to/from a group.

Procedure#2

1. In the tree structure of the Directory panel, select the wanted group.
   • The Information tab appears.

     

2. Use the Add user and Remove users buttons to add or remove the user to/from a group.

Managing access points

Subject

This section describes the operations specific to access point administration. The definition of the Access Point object and its relationships with the User and Application objects are described in Section Enterprise Access Management Concepts.

Before starting

• Access points are included in the EAM administration domain only if the following conditions are met:
  • The access point belongs to the reference domain.
  • The EAM clients must be installed on the workstations included in the EAM administration domain.

    IMPORTANT: Only the workstations on which the EAM client is deployed appear in the tree structure (Directory panel).

• If you want to assign several access point profiles, sort the workstations according to the organizations (organizational units) in which they are located. If necessary, use the tree structure to define specific parameters in the security policy.

  NOTE: These tasks must be carried out directly in your LDAP directory, using the appropriate tools. .

• If you are working in "no access point management" mode, the access point clients do not appear in the directory tree.

  NOTE: If you are using Active Directory, access points appear in the tree but cannot be modified.

In this section:

• Displaying general information about the access point
• Defining access point configuration parameters
• Assigning/forbidding users to an access point
• Assigning/forbidding applications to an access point
• Adding or removing an access point from a group
• Analyzing Errors of a Remote Access Point
• Displaying access point event logs
• Updating manually an access point

Displaying general information about the access point

Displaying general information about the access point

Subject

You can display access point general information. This data is retrieved from the installation of the EAM client and from the LDAP directory.

Procedure

1. In the tree structure of the Directory panel, select the wanted access point.
2. Click the Information tab.

   

   NOTE: Member of area: for detailed information on adding or removing an access point to/from a group, see Section Adding or removing an access point from a group. Cluster area: to know how to add the access point to a cluster, see Section Managing clusters of access points.

Defining access point configuration parameters

In this section:

• Assigning an access point security profile
• Managing EAM controller services
• Assigning a generic account to an access point