Chat now with support
Chat with Support

Identity Manager 8.0 - Installation Guide

About this Guide One Identity Manager Overview Installation Prerequisites Installing the One Identity Manager Installing and Configuring the One Identity Manager Service Updating the One Identity Manager Installing and Updating a One Identity Manager Application Server Installing, Configuring and Maintaining the Web Portal Installing the Operations Support Web Portal Installing and Updating the Manager Web Application Logging into One Identity Manager Tools Troubleshooting Appendix: One Identity Manager Authentication Modules Appendix: Creating a One Identity Manager Database for a Test or Development Environment from a Database Backup Appendix: Manager Web Application Extended Configuration Appendix: Machine Roles and Installation Packages Appendix: Settings for a New SQL Server Database

One Identity Manager Tools

One Identity Manager Tools

There are different tools for different tasks. For example, a different tool is used to configure One Identity Manager as that for managing employee data. The contents to be displayed and the extent to which it can be altered is determined in conjunction with the access rights of the respective user through the object layer.

Table 2: Overview of One Identity Manager Tools
Tool Short description

Launchpad

The Launchpad is the central tool for starting administration tools and One Identity Manager configuration tools. Use the Launchpad to check the existing One Identity Manager installation and start One Identity Manager tools for executing individual tasks.

The Launchpad can be customized. You can define your own menu items and action for the Launchpad in the Designer.

Web Portal

The Web Portal is a web based application for all One Identity Manager users. The Web Portal provides strict workflows in the following areas:

  • Change employee master data and own password
  • Edit or enter employee master data for staff.
  • Search, request, cancel or renew products in the IT Shop.
  • Delegate own roles.
  • Edit assigned approvals, attestation instances and rule violations.

In the info system, you see several evaluations, for example, about your own requests and attestation instances, employee numbers, approvals, rule violations, or the Unified Namespace.

The Web Portal requires a web server. Users use a web browser to access the website that has been dynamically set up and customized for them. Once the web server has been configured and a web project in Web Designer has been shared, you can start the Web Portal in your own web browser.

Manager

The Manager is the main administration tool for setting up information about employees and their identities. It displays and maintains all the data required for the administration of employees, their user accounts, permissions and company specific roles in a One Identity Manager network. Company resources employees require can be entered and assigned to them.

You can also use the Manager to:

  • Define custom IT policies
  • Set up an IT Shop to request company resources and assignments from
  • Set up special approval processes for authorizing requests and checking compliance to IT policy
  • Set up attestation procedures for regularly testing the correctness of data about employees or roles and their assignments

By implementing One Identity Manager application roles, every One Identity Manager user obtains only those access permissions they require to fulfill necessary administrative duties.

Manager functionality can be provided by web applications.

Synchronization Editor

You use the Synchronization Editor to connect different target systems to One Identity Manager. Use this tool to configure data synchronization for any target system and specify which target system data is mapped to the One Identity Manager database. You also define the object properties mapping and the synchronization sequence as a workflow.

Analyzer

Use the Analyzer to automatically detect and analyze data correlations in the database. This information can be used to replace direct permissions assignments with indirect assignments, therefore reducing the administration effort.

Job Queue Info

Job Queue Info supports the control of the current state of a service running on the One Identity Manager network. It displays, in a detailed and comprehensive manner, requests in the job queue and the different One Identity Manager Service requests on the servers. The tool provides on-the-fly status information and makes fast error detection possible.

Configuration Wizard

The Configuration Wizard tool installs a database on a SQL Server or an Oracle Database database system for use in a One Identity Manager network. All the One Identity Manager schema tables, data types and database procedures are loaded into the database with the Configuration Wizard. The database roles are added with permissions for the One Identity Manager schema.

Automatic version control is integrated into the One Identity Manager, ensuring that One Identity Manager components are always consistent with each other and with the database. If program updates are implemented that change the structure (for example, table extensions), then the database must perform a migration. The Configuration Wizard executes this schema installation depending on the current status of the schema.

Designer

The Designer is the main tool for configuring the One Identity Manager. The program offers an overview of the entire One Identity Manager data model. It enables the configuration of global system settings, for example, language or configuration parameters, as well as customizing the user interface for the different administration tools. The rights structure for different administrative tasks of individual users and user groups is also set up with the Designer. Another important task is the definition of workflows for technically illustrating the administration procedures in the company. The Designer provides various editors for the One Identity Manager system configuration. The range of functions and the operating methods of the editors matches the demands of differing configurations.

Web Designer

The Web Designer is used to configure and expand a Web Portal. It makes functions available for customizing Web Portals and for designing new workflows.

Data Import

Data Import has a program called "One Identity Manager" which provides a simple solution for importing data from other systems. Use this program if you want to import company resource data from external sources into your database. The program supports importing from files and importing directly from other database systems. You can import data immediately. You also have the option to import data from customized processes using the import scripts that are created. The import definition is saved so that you can use it for future data imports.

Crypto Configuration

In certain circumstances it is necessary store encrypted information in the database. Encryption is carried out by the program "Crypto Configuration". This program creates a code file and converts the contents of the affected database column. The coded information is stored in the database.

Database Compiler

The One Identity Manager database must be compiled after changes to configuration data. After importing a migration package or a full custom configuration package, compiling the database is started immediately from the Configuration Wizard or Database Transporter.

The Database Compiler compiles the One Identity Manager database after importing hotfixes or when changes have been made to processes, scripts, formatting rules, object definitions, task definitions, and preprocessor relevant configuration parameters.

Report Editor

With the Report Editor, you can group One Identity Manager object data together into reports. You can group, accumulate, and graphically represent this data. Some of our own reports are supplied with the initial migration. However, you can also create your own reports with the Report Editor.

Schema Extension

The Schema Extension extends the existing application data schema of the One Identity Manager database with customer specific tables and columns. Using the object technology in the One Identity Manager, it is possible to do this on a database level such that these additions are available with full functionality at the object level.

System Debugger

Use the System Debugger to create, start and debug scripts. Existing scripts in your One Identity Manager database are imported into a Visual Studio script library. There, you can edit and test the scripts. Subsequently, you decide whether your changes should be transferred to the One Identity Manager database.

Database Transporter

The Database Transporter transfers objects and custom changes as well as custom database procedures, triggers, functions, and sets from the One Identity Manager database (source) to another One Identity Manager database (target).

HistoryDB Manager

One Identity Manager historical data is transferred at regular intervals into a One Identity Manager History Database. Therefore, the One Identity Manager History Database provides an archive of change information. The HistoryDB Manager tool displays the data in the One Identity Manager History Database. Use the HistoryDB Manager to setup access to the source databases.

Job Service Configuration

Job Service Configuration is used to create and customize the configuration file for One Identity Manager Service. One Identity Manager Service and its plugins are configured with this file. The configuration file is necessary both for One Identity Manager Service on a Windows based operating system and also for the Linux daemon.

License Meter

Use the License Meter wizard to execute a licenses count in your One Identity Manager database. The wizard creates a report with license relevant information.

Software Loader

Use the Software Loader to load new or modified files, for example custom form archives, in the One Identity Manager database in order to distribute them to One Identity Manager network workstations and Job servers using automatic software updating.

Server Installer

Use the Server Installer to install and configure the One Identity Manager Service. The program executes remote installation of the One Identity Manager Service. Local installation of the service is not possible with this program.

Related Topics

Which Components and Front-ends Work with an Application Server?

Which Components and Front-ends Work with an Application Server?

The following list tells you which One Identity Manager components can work with an application server. Some front-ends only work have limited functionality to work with an application server.

Table 3: One Identity Manager Components and Application Servers
Component Connection through Application Server? Restrictions
Launchpad

Yes

Certain application, which you can start from the Launchpad, require a direct connection to the database.

Web Portal

Yes

 

Manager

Yes

The consistency check is not supported.

Compliance rule simulation is not supported.

Some forms are not supported.

Manager web application

Yes

Some forms are not supported.

Synchronization Editor

Yes

 

Analyzer

Yes

 

Job Queue Info

No

 

Configuration Wizard

No

 

Designer

Yes

The consistency check is not supported.

Process simulation is not supported.

Database compilation is not supported.

Web Designer

Yes

 

Data Import

Yes

 

Crypto Configuration

No

 

Database Compiler

No

 

Report Editor

Yes

SQL query testing is not supported.

Schema Extension

No

 

System Debugger

Yes

 

Database Transporter

No

 

HistoryDB Manager

Yes

 

License Meter

Yes

 

Software Loader

Yes

 

SPML web application

No

 

SOAP Web Service

No

 

One Identity Manager Service

Yes

 

Server Installer Yes  

Installation Prerequisites

The following installation prerequisites represent only the minimum requirements for installing and unlimited operation of One Identity Manager. These prerequisites can be used as a starting point for other planning, depending on the size of the project and which business processes and business transactions are supported. Determining hardware capacities and any further development is part of project planning and dependent on the Identity Management project specification. Particular attention must be paid to I/O performance (in throughput and latency) and in SAN environments in particular, a targeted performance analysis of the specify infrastructure is recommended before implementation.

Every One Identity Manager installation can be virtualized. Ensure that performance and resources are available to the respective One Identity Manager component according to system requirements. Ideally, resource assignments for the database server are fixed. Virtualization of a One Identity Manager installation should only be attempted by experts with well-based knowledge of virtualization techniques. For more information about virtual environments, see Product Support Policies.

NOTE: Other system requirements for individual One Identity Manager models are listed in the corresponding documentation for those specific modules.

Detailed information about this topic

Minimum System Requirements for the Database Server

Minimum System Requirements for the Database Server

One Identity Manager supports the following database systems:

  • SQL Server
  • Oracle Database

The following system prerequisites must be met in order to install the database on a server.

Table 4: Minimum System Requirements - Database Server

Processor

8 physical cores 2.5 GHz+

NOTE: 16 physical cores are recommended on the grounds of performance.

Memory

16 GB+ RAM

Hard drive storage

100 GB

operating system

Windows operating system

Following versions are supported:

  • Windows Server 2008 (non-Itanium based 64-bit) Service Pack 2 or later
  • Windows Server 2008 R2 (non-Itanium based 64-bit) Service Pack 1 or later
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows Server 2016

UNIX and Linux operating systems

  • Note the minimum requirements given by the operating system manufacturer for Oracle databases.

NOTE: In virtual environments, you must ensure that the VM host provides performance and resources to the database server according to system requirements. Ideally, resource assignments for the database server are fixed. Furthermore, optimal I/O performance must be provided, in particular for the database server. For more information about virtual environments, see Product Support Policies.

Related Topics
Related Documents