About this Guide
This guide describes the basic layout of the One Identity Manager tools' user interface, using the Manager as an example. It explains the standard functions of the One Identity Manager tools. The guide also contains a collection of quick reference guides to common functions of the One Identity Manager.
This guide is intended for end users, system administrators, consultants, analysts, and any other IT professionals using the product.
|
|
NOTE: This guide describes One Identity Manager functionality available to the default user. It is possible that not all the functions described here are available to you. This depends on your system configuration and permissions. |
Logging into One Identity Manager Tools
When you start one of the One Identity Manager tools, a default connection dialog box opens.
Figure 1: Default connection dialog
When you log in, you need to be aware of the difference between a database user and a user of individual One Identity Manager tools (system user). More than one system user may work with the same database account.
Login takes place in two steps:
- Selecting the database connection to log in to the database
- Selecting the authentication method and finding the system user for logging in
Permitted system user IDs are determined by the authentication module you select. The One Identity Manager provides different authentication parameters.
|
|
NOTE: When you start the program, it tries to restore the last used connection. This might lead to a delay resulting in an error if you frequently swap between connections to other database servers. To prevent the previous connection restoring, create the following registry key: HKEY_CURRENT_USER\Software\One Identity\One Identity Manager\Global\Settings\[RestoreLastConnection]="false" |
Detailed information about this topic
- Logging into a One Identity Manager Database as a Database User
- Logging into One Identity Manager Administration Tools as a System User
Logging into a One Identity Manager Database as a Database User
To select an existing connection
- Select the connection under "Select Connection" in the connection dialog box.
|
|
NOTE: Newly created connection are only shown in the list after the program has been restarted. |
To create a new connection to a One Identity Manager database under SQL Server
- Click Add new connection under "Select Connection" and select the system type SQL Server.
- Click Next.
- Enter the connection data for the database server.
Table 1: SQL Server Database Connection Data Data Description Server
Database server.
Windows authentication
Specifies whether Windows authentication is used.
This type of authentication is not recommended. If you decide to use it anyway, ensure that your environment supports Windows authentication.
User
Database user.
Password
Database user password.
Database
Database.
- Select Test connection in the Options menu.
This attempts to connect the database with the given connection data. You are prompted to confirm a message about the test.
NOTE: Use Options | Advanced options to make further changes to the database connection configuration settings.
-
Click Finished.
Figure 2: Connection Data Dialog Box under SQL Server
To create a new connection to a One Identity Manager database under Oracle
- Click Add new connection under "Select Connection" and select the system type Oracle.
- Click Next.
- Enter the connection data for the Oracle instance.
Table 2: Oracle Database Connection Data Data Description Direct access (without Oracle client) Set this option for direct access. Deactivate this option for access via Oracle Clients.
Which connection data is required, depends on how this option is set.
Server Database server. Port Oracle instance port. Service name Service name. User Oracle database user. Password Database user password. Data source TNS alias name from TNSNames.ora. - Select Test connection in the Options menu.
This attempts to connect the database with the given connection data. You are prompted to confirm a message about the test.
NOTE: Use Options | Advanced options to make further changes to the database connection configuration settings.
-
Click Finished.
Figure 3: Connection Data Dialog Box under Oracle
To set up a new connection to the application server
- Click Add new connection under "Select Connection" and select the system type Application server.
- Click Next.
- Enter the address (URL) for the application server.
- If you access an application server secured through SSL/TLS, configure additional settings for the certificate:
- If the certificate's server name matches the application server's URL and, if the server certificate can be successfully validated, the server name displayed in green next the URL. By clicking on the server name next to the URL, you can get information about the certificate. You can select a certificate required for logging in, under Pin server certificate.
- If the certificate's server name does not match the application server's URL or, if the server certificate cannot be successfully verified, the server name displayed in red next the URL. You decide whether to trust the certificate.
- If a client certificate is expected according to the SSL settings, select the certificate under Select client certificate and decide how to verify the certificate. You can choose between "Find by subject name", "Find by issuer name" and "Find by thumbprint".
- If you want use a self-signed certificate, set the option Accept self-signed certificate.
- Select Test connection in the Options menu.
This attempts to connect the database with the given connection data. You are prompted to confirm a message about the test.
NOTE: Use Options | Advanced options to make further changes to the database connection configuration settings.
- Click Finished.
Figure 4: Dialog box for connecting to the application server
Related Topics
Logging into One Identity Manager Administration Tools as a System User
Following the database login, the user must log in as a system user to the started program. Permitted system user IDs are determined by the authentication module you select.
To log in to One Identity Manager tools with a system user identifier
- Select the authentication module under "Authentication method" in the connection dialog box.
This displays a list of all available authentication modules.
- Enter the login data for the system user ID.
Which login data you require depends on the authentication module selected.
- Click Log in.
The connection data is saved and made available for the next login.
Figure 5: Connection Dialog Box with Administration Tool Login
If you have entered a system user ID that is not supported by the selected authentication module, the following error message appears:
[810284] Failed to authenticate user.
[810015] Login for user {0} failed.
[810017] Wrong user name or password.
Repeat the login by selecting another authentication module or another system user ID.
|
|
NOTE: After initial schema installation, only the authentication modules "system user" and "ComponentAuthenticator" and the role-based authentication modules are enabled in the One Identity Manager. |