Chat now with support
Chat with Support

Identity Manager 8.1 - Administration Guide for Connecting to a Universal Cloud Interface

Managing Universal Cloud Interface Environments Setting up Synchronization with a Cloud Application in the Universal Cloud Interface Basic data for managing a Universal Cloud Interface environment Cloud Target Systems Container Structures in a Cloud Target System Cloud User Accounts Cloud Groups Cloud Permissions Controls Provisioning Object Changes Reports about Objects in Cloud Target Systems Appendix: Configuration Parameters for Managing Cloud Target Systems Appendix: Default Project Template for Cloud Application in the Universal Cloud Interface

Predefined password policies

You can customize predefined password policies to meet your own requirements, if necessary.

Password for logging in to One Identity Manager

The One Identity Manager password policy is applied for logging in to One Identity Manager. This password policy defined the settings for the system user passwords (DialogUser.Password and Person.DialogUserPassword) as well as the access code for a one off log in on the Web Portal (Person.Passcode).

NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts or system users.

For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.

Password policy for forming employees' central passwords

An employee's central password is formed from the target system specific user accounts by respective configuration. The Employee central password policy password policy defines the settings for the (Person.CentralPassword) central password. Members of the Identity Management | Employees | Administrators application role can adjust this password policy.

IMPORTANT: Ensure that the Employee central password policy password policy does not violate the system-specific requirements for passwords.

For detailed information about password policies for employees, see the One Identity Manager Identity Management Base Module Administration Guide.

Password policies for user accounts

Predefined password policies are provided, which you can apply to the user account password columns of the user accounts.

IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy standard policy applies. in this case, ensure that the default policy does not violate the target systems requirements.

NOTE: When you update One Identity Manager version 7.x to One Identity Manager version 8.1, the configuration parameter settings for forming passwords are passed on to the target system specific password policies.

The Cloud system password policy is predefined for cloud target systems. You can apply this password policy to cloud target system user account passwords (CSMUser.Password) or to a container.

If the cloud target systems' or containers' password requirements differ, it is recommended that you set up your own password policies for each cloud target system or container.

Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.

Using a password policy

The Cloud system password policy is predefined for cloud target systems. You can apply this password policy to cloud target system user account passwords (CSMUser.Password) or to a container.

If the cloud target systems' or containers' password requirements differ, it is recommended that you set up your own password policies for each cloud target system or container.

Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.

The password policy that is to be used for a user account is determined in the following sequence:

  1. Password policy of the account definition of the user account

  2. Password policy of the manage level of the user account

  3. Password policy for the container of the user account

  4. Password policy for the target system of the user account

  5. Password policy One Identity Manager password policy (default policy)

IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy standard policy applies. in this case, ensure that the default policy does not violate the target systems requirements.

To reassign a password policy

  1. Select Cloud target systems | Basic configuration data | Password policies in Manager.

  2. Select the password policy in the result list.
  3. Select Assign objects.
  4. Click Add in the Assignments section and enter the following data.

    Table 16: Assigning a Password Policy

    Property

    Description

    Apply to

    Application scope of the password policy.

    To specify an application scope

    1. Click next to the text box.
    2. Select one of the following references under Table:
      • The table that contains the base objects of synchronization.
      • Select the TSBAccountDef table to apply the password policy based on the account definition.
      • Select the TSBBehavior table to apply the password policy based on the manage level.
    3. Select the table that contains the base objects under Apply to.
      • If you have selected the table containing the base objects of synchronization, next select the specific target system.
      • If you have selected the TSBAccountDef table, next select the specific account definition.
      • If you have selected the TSBBehavior table, next select the specific manage level.
    4. Click OK.

    Password column

    The password column's identifier.

    password policy

    The identifier of the password policy to be used.

  5. Save the changes.

To change a password policy's assignment

  1. Select Cloud target systems | Basic configuration data | Password policies in Manager.

  2. Select the password policy in the result list.
  3. Select Assign objects.
  4. Select the assignment you want to change in Assignments.
  5. Select the new password policy to apply from the Password Policies menu.
  6. Save the changes.

Editing password policies

To edit a password policy

  1. Select Cloud target systems | Basic configuration data | Password policies in Manager.

  2. Select the password policy in the result list and select Change master data.

    - OR -

    Click in the result list toolbar.

  3. Edit the password policy's master data.
  4. Save the changes.
Detailed information about this topic

General master data for a password policy

Enter the following master data for a password policy.

Table 17: Master data for a password policy

Property

Meaning

Display name

Password policy name. Translate the given text using the button.

Description

Spare text box for additional explanation.Translate the given text using the button.

Error Message

Custom error message outputted if the policy is not fulfilled. Translate the given text using the button.

Owner (Application Role)

Application roles whose members can configure the password policies.

Default policy

Mark as default policy for passwords.

NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts or system users.
Related Documents