Chat now with support
Chat with Support

Identity Manager 8.1 - Configuration Guide

About this guide One Identity Manager software architecture Customizing the One Identity Manager default configuration Adjusting the One Identity Manager base configuration One Identity Manager schema basics Editing the user interface
Object definitions for the user interface User interface navigation Forms for the user interface Statistics in One Identity Manager Extending the Launchpad Task definitions for the user interface Applications for configuring the user interface Icons and images for configuring the user interface Using predefined database queries
Localization in One Identity Manager Process orchestration in One Identity Manager
Setting up Job servers in Designer Configuring the One Identity Manager Service Handling processes in One Identity Manager
Tracking changes with process monitoring Conditional compilation using preprocessor conditions Scripts in One Identity Manager Reports in One Identity Manager Adding custom tables or columns to the One Identity Manager schema Web service integration SOAP Web Service One Identity Manager as SPML provisioning service provider Processing DBQueue tasks Appendix: Configuration files of the One Identity Manager Service

Overview of server functions

To display information about server functions

  • In the Designer, select Base data | Installation | Server functions.

The server function defines the functionality of a server in One Identity Manager. One Identity Manager processes are handled depending on the server function.

 NOTE: More server functions may be available depending on which modules are installed.
Table 75: Permitted server functions

Server function

Remark

Update Server

This server executes automatic software updating of all other servers. The server requires a direct connection to the database server that One Identity Manager database is installed on. The server can execute SQL tasks.

The server with the installed One Identity Manager database, is labeled with this functionality during initial installation of the schema.

SQL processing server

The server can execute SQL tasks. Several SQL processing servers can be set up to spread the load of SQL processes. The system distributes the generated SQL processes throughout all the Job servers with this server function.

CSV script server

The server can process CSV files using the ScriptComponent process component.

One Identity Manager Service installed

Server on which a One Identity Manager Service is installed.

SMTP host

Server from which One Identity Manager Service sends email notifications. Prerequisite for sending mails using One Identity Manager Service is SMTP host configuration.

Default report server

Server on which reports are generated.

Related Topics

Overview of machine roles

To display information about machine roles

  • In the Designer, select the category Base data | Installation | Machine roles.

Installation packages to be installed on the Job server are found depending on the selected machine role.

Table 76: Machine role and installation package options
Machine role Description of the Installation Package
Workstation  

Contains all basic components for installing tools on an administrative workstation.

Administration

Contains One Identity Manager administration tools required by default users for fulfilling their task with One Identity Manager, As well as the tools, which ensure basic functionality for working with One Identity Manager, this includes the Manager as the main administration tools.

Configuration

Contains all One Identity Manager tools of the default user and additional programs for configuring the system. These include, for example, Configuration Wizard, Database Compiler, Database Transporter, Crypto Configuration, Designer, Web Designer, and configuration tools for the One Identity Manager Service.

Development & Testing

Contains the One Identity Manager tools for developing and testing custom scripts and forms, for example, the System Debugger.

Monitoring

Contains One Identity Manager programs for monitoring the system status, for example Job Queue Info.

Documentation

 

 Contains One Identity Manager documentation in different languages.
Server  

Contains all the basic components for setting up a server.

Job server

Contains the One Identity Manager Service and basic processing components. Additional machine roles contain connectors for synchronizing individual target systems.

 NOTE: The Base data | Installation | Machine roles category also displays the API and Web machine roles. These are reserved for internal user and cannot be changed or assigned.
Related Topics

Job server statistic information

This Job server statistic data is evaluated and creates a basis for configuration recommendations for Job server load intervals. The data for the last 100 days is included in the calculation of the configuration recommendations. You should take these configuration suggestions into account when configuring the One Identity Manager Service.

To find statistics

  • In Designer, enable the Common | JobQueueStats configuration parameter. If the configuration parameter is enabled, statistic information of the One Identity Manager Service is written to the JobQueueStats table.
  • In Designer, enable the Common | JobQueueStats | MaxAge configuration parameter and enter the retention period for the statistic information in days.

For every action in the Job queue, such as inserting, changing or deleting processes, new statistic entries are created for the Job server. The DBQueue Processor task QBMJobQueueStatsShrink compresses the statistics. The compression takes place for every hour prior to the current hour.

To display Job server statistics

  1. Select Base Data | Installation | Job server in Designer.
  2. Start the Job Server Editor using the Edit Job server task.
  3. Select the Job server to be edited in the Job server overview.
  4. Use the Select columns context menu to select the columns with statistic information.

    These columns are highlighted in the color in the Job server view.

    Table 77: Columns for mapping the statistic information
    Column Name Meaning

    AverageLoad

    Averaged process/hour

    Average number of processes per hour.

    MaxLoad

    Maximum processes/hour

    Maximum number of processes per hour.

    LoadDuration

    Recommended load interval (seconds)

    Configuration suggestion for the Process request interval (StartInterval) parameter in the One Identity Manager Service configuration.

    StatisticsDuration

    Recommended statistic interval (seconds)

    Configuration suggestion for the Time interval for statistic information (StatisticInterval) parameter in the One Identity Manager Service configuration.

Related Topics

Connection data for process generation

To generate processes for the Job server, you need the provider, connection parameters and the authentication data. In the default case, this information is determined from the database connection data.

If a Job server has no direct connection to the database, but works with an application server:

  • Enter the connection data for the application server.

  • Label the Job server with the No direct database connection option and assign the connection data to the application server.

TIP: Label one set of connection data for the application server as a Fallback connection. This connection data is used if you do not enter any reference to concrete connection data on the Job server.

Determining the connection data during process generation

  • The connection data from the database information is used for all Job servers with a direct data connection.

  • Connection data for Job servers without a direct database connection is determined as follows:

    1. Connection data that is entered on the Job server.

    2. Connection data that is labeled as a fallback connection.

    3. Connection data that is entered in the database information.

Detailed information about this topic
Related Documents