Identity Manager 8.0 - Administration Guide for Connecting Unix-Based Target Systems

Deleting an Account Definition

You can delete account definitions if they are not assigned to target systems, employees, hierarchical roles or any other account definitions.

To delete an account definition

1. Remove automatic assignments of the account definition from all employees.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Select Change master data in the task view.
   4. Disable the option Automatic assignment to employees on the General tab.
   5. Save the changes.
2. Remove direct assignments of the account definition to employees.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Select Assign to employees in the task view.
   4. Remove employees from Remove assignments.
   5. Save the changes.
3. Remove the account definition's assignments to departments, cost centers and locations.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Select Assign organizations.
   4. Remove the account definition's assignments to departments, cost centers and locations in Remove assignments.
   5. Save the changes.
4. Remove the account definition's assignments to business roles.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Select Assign business roles in the task view.

      Remove business roles from Remove assignments.

   4. Save the changes.
5. If the account definition was requested through the IT Shop, it must be canceled and removed from all IT Shop shelves. For more detailed information, see the .One Identity Manager IT Shop Administration Guide
6. Remove the account definition assignment as required account definition for another account definition. As long as the account definition is required for another account definition, it cannot be deleted. Check all the account definitions.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Select Change master data in the task view.
   4. Remove the account definition from the Required account definition menu.
   5. Save the changes.
7. Remove the account definition's assignments to target systems.
   1. Select the host in the category Unix | Hosts.
   2. Select Change master data in the task view.
   3. Remove the assigned account definitions on the General tab.
   4. Save the changes.
8. Delete the account definition.

   1. Select the category Unix | Basic configuration data | Account definitions | Account definitions.

   2. Select an account definition in the result list.
   3. Click , to delete the account definition.

Password Policies

One Identity Manager provides you with support for creating complex password policies, for example, for system user passwords, the employees' central password as well as passwords for individual target systems. Password polices apply not only when the user enters a password but also when random passwords are generated.

Predefined password policies are supplied with the default installation that you can user or customize if required. You can also define your own password policies.

Detailed information about this topic

• Predefined Password Policies
• Editing Password Policies
• Custom Scripts for Password Requirements
• Restricted Passwords
• Testing a Password
• Testing Generating a Password
• Assigning a Password Policy

Predefined Password Policies

You can customize predefined password policies to meet your own requirements, if necessary.

Password for logging into One Identity Manager

The password policy "One Identity Manager password policy" is used for logging into One Identity Manager. This password policy defined the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the access code for a one off log in on the Web Portal (Person.Passcode).

The password policy "One Identity Manager password policy" is also labeled as the default and is used when no other password policy is found.

Password policy for forming employees' central passwords

An employee's central password is formed from the target system specific user accounts by respective configuration. The password policy "Employee central password policy" defines the settings for the central password (Person.CentralPassword).

Password policies for target systems

A predefined password that you can apply to the user account password columns, is provided for every target system.

The password policy "Unix password policy" is predefined for Unix-based systems. You can apply this password policy to Unix user accounts (UNXUser.Password) of a Unix host.

If the hosts' password requirements differ, it is recommended that you set up your own password policies for each host.

Editing Password Policies

To edit a password policy

1. Select the category Manager | Basic configuration data | Password policies in the Unix.

2. Select the password policy in the result list and select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the password policy's master data.
4. Save the changes.

Detailed information about this topic

• General Master Data for a Password Policy
• Policy Settings
• Character Sets for Passwords
• Custom Scripts for Password Requirements