Identity Manager 8.1 - Configuration Guide

Enter the connection data for the application server

To enter connection data for the application server

1. In Designer, select Base data | Security settings | Connection data.

2. Using the Object | New menu item, enter new connection data.

3. Enter the following information.

   Table 78: Properties of connection data

   Property	Description
   Display name	Display name of the connection data. Using this display name, you can select the connection data at the Job server entry.
   Fallback connection	Label one of the sets of connection data for the application server as a Fallback connection. This connection data is used if you do not enter any reference to concrete connection data on the Job server.
   Provider	For connection data for the application server, select Application Server.
   Connection parameter	Enter the web address (URL) for the application server. Use the ... button to open the default connection dialog box, from which you can specify other options and test the connection.
   Authentication data	Enter the authentication data Syntax: Module=<name>;<property1>=<value1>;<property2>=<value2>,… Example: Module=DialogUserAccountBased Use the ... button to open a dialog box from which you can select the authentication module directly. The authentication data is transferred when the dialog is closed. For detailed information about the One Identity Manager authentication modules, see the One Identity Manager Authorization and Authentication Guide.

Related Topics

• Connection data for process generation
• Enter the connection data on the Job server

Enter the connection data on the Job server

To declare the connection data on the Job server

1. In the Designer, select the Base data | Installation | Job server category.
2. Select the Job server to be edited in the Job server overview.
3. Edit the following data on the Properties tab.
   • Enable the No direct database connection option for the Job server.
   • Under Connection data, select the connection data for the application server.

Related Topics

• Connection data for process generation
• Enter the connection data for the application server

Installing the One Identity Manager Service on the Job server

You have the option to install certain Job servers remotely in the Job Server Editor. The remote installation wizard executes the following steps:

• Installation of One Identity Manager Service components.
• Configuration of One Identity Manager Service.
• Starts the One Identity Manager Service.

Prerequisites for Remote Installation

• The Job server is entered in the database
• There is a user account with sufficient permissions for installing the One Identity Manager Service.
• Remote installation is only supported within a domain or a trusted domain.

To install the One Identity Manager Service remotely

1. Select Base Data | Installation | Job server in Designer.
2. Start the Job Server Editor using the Edit Job server task.
3. Select the Job server to be edited in the Job server overview.
4. Select the Job server | Install service menu item.

   This starts the One Identity Manager Service remote installation wizard.

5. On the start page of the wizard, click Next.
6. On the Configure service, enter the configuration settings of the One Identity Manager Service.

   Initial configuration of the service is already predefined for the database connection. To use this template, enter the connection data for process collection. In order to extend the configuration, each configuration section of the One Identity Manager Service is listed in the module list.

   1. For a direct connection to the database:
      1. Select Process collection | sqlprovider
      2. Click the Connection parameter entry and click the Edit button.

      3. Enter the connection data for the One Identity Manager database.

   2. For a connection to the application server:
      1. Select Process collection, click the Insert button and select AppServerJobProvider.
      2. Click the Connection parameter entry and click the Edit button.

      3. Enter the connection data for the application server.

      4. Click the Authentication data entry and click the Edit button.
      5. Select the authentication module. Depending on the authentication module, other data may be required, for example, user and password. For detailed information about the One Identity Manager authentication modules, see the One Identity Manager Authorization and Authentication Guide.

7. On the Installation source and destination page, enter the following information.

   Table 79: Installation Data

   Data	Description
   Installation directory	Select the directory with the installation files.
   Private key	If the database is encrypted, select the file with the private key.
   Computer	Server on which to install and start the service from.
   Service account	User account data for the One Identity Manager Service. For information about user account requirements, see the One Identity Manager Installation Guide. To enter a user account for the One Identity Manager Service Set the option Local system account. This starts the One Identity Manager Service under the NT AUTHORITY\SYSTEM account. - OR - Enter user account, password and password confirmation.
   Installation account	Data for the administrative user account to install the service. To enter an administrative user account for installation Enable Current user. This uses the user account of the current user. - OR - Enter user account, password and password confirmation.

8. Click Next to start installing the service.

   Installation of the service occurs automatically and may take some time.

9. Click Close to end the workflow wizard.

Related Topics

• Setting up Job servers in Designer
• Configuring the One Identity Manager Service

Configuring the One Identity Manager Service

The One Identity Manager Service distributes the information managed in the One Identity Manager database across the network. The One Identity Manager Service performs data synchronization between the database and any connected target systems and executes actions at the database and file level. The One Identity Manager Service retrieves process steps from the JobQueue. Process steps are executed by process components. The One Identity Manager Service also creates an instance of the required process component and transfers the process step parameters. Decision logic monitors the execution of the process steps and determines how processing should continue depending on the results of the executed process components. The One Identity Manager Service enables parallel processing of process steps because it can create several instances of process components.

A Job provider function makes a Job destination process step available within the One Identity Manager Service. The Job destination function handles the process steps and returns a result to the Job provider. The Job provider evaluates the result.

The combination of a Job provider on one server and a Job destination on another server is called a "Job gate". The Job provider and Job destination are configured within the Jobgate such that they can communicate with each other.

Figure 28: Example of the mode of operation of the One Identity Manager Service

Figure 29: Example Configuration for FileJobGate

Detailed information about this topic

• One Identity Manager Service configuration files
• Customizing the One Identity Manager Service configuration for a Job server
• Process collection module
• Job destination module
• Selecting a method
• Logwriter module
• Dispatcher module
• Connection module
• HTTP authentication module
• Module plug-ins
• File module with private key