Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 9.0 LTS - Administration Guide for Connecting to a Universal Cloud Interface

Table of Contents

Managing Universal Cloud Interface environments

Architecture overview One Identity Manager users for managing cloud target systems

Synchronizing a cloud application in the Universal Cloud Interface

Setting up initial synchronization with a cloud application in the Universal Cloud Interface

Users and permissions for synchronizing with a cloud application Setting up the synchronization server

System requirements for the synchronization server Installing One Identity Manager Service with a Universal Cloud Interface connector

Creating a synchronization project for initial synchronization of a cloud application

Information required for setting up a synchronization project Creating an initial synchronization project for a cloud application

Start up configurations for cloud application synchronization Configuring the synchronization log

Customizing the synchronization configuration

How to configure Universal Cloud Interface synchronization Configuring synchronization of multiple cloud applications Changing system connection settings of cloud applications in the Universal Cloud Interface

Editing connection parameters in the variable set Editing target system connection properties

Updating schemas Speeding up synchronization with revision filtering Configuring single object synchronization Speeding up provisioning

Running synchronization

Starting synchronization Deactivating synchronization Displaying synchronization results

Tasks following synchronization

Post-processing outstanding objects Displaying the target system synchronization configuration Managing cloud user accounts through account definitions

Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)

Provisioning object changes

The provisioning sequence Displaying pending changes Retention time for pending changes

Managing cloud user accounts and employees

Account definitions for cloud user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to cloud target systems Deleting account definitions

Assigning employees automatically to user accounts

Editing search criteria for automatic employee assignment Finding employees and directly assigning them to user accounts Changing manage levels for cloud user accounts

Supported user account types

Default user accounts Administrative user accounts

Providing an administrative user account for one employee Providing an administrative user account for multiple employees

Privileged user accounts

Setting deferred deletion for cloud target system user accounts

Managing assignments of cloud groups and system entitlements

System entitlements types in cloud target systems Assigning cloud groups and system entitlements to cloud user accounts in One Identity Manager

Prerequisites for indirect assignments of cloud groups and system entitlements to user accounts Assigning cloud groups to departments, cost centers, and locations Assigning cloud system entitlements to departments, cost centers, and locations Assigning cloud groups to business roles Assigning cloud system entitlements to business roles Adding cloud groups to system roles Adding cloud system entitlements to system roles Adding cloud groups to the IT Shop Adding cloud system entitlements to the IT Shop Assigning cloud user accounts directly to cloud groups Assigning cloud user account directly to cloud system entitlements Assigning cloud groups directly to cloud user accounts Assigning cloud system entitlements directly to cloud user accounts

Assigning default profiles to user accounts in Salesforce applications Effectiveness of memberships in cloud groups and system entitlements Inheriting cloud groups and system entitlements based on categories Overview of all assignments

Login information for cloud user accounts

Password policies for cloud user accounts

Predefined password policies Using password policies Creating password policies Editing password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Password exclusion list Checking passwords Testing password generation

Initial password for new cloud user accounts Email notifications about login data

Mapping cloud objects in One Identity Manager

Cloud target systems

General main data for cloud target systems Defining categories for inheriting cloud groups and system entitlements Specifying alternative column names Editing the synchronization project for a cloud target system

Container structures Cloud user accounts

Creating and editing cloud user accounts

General main data for cloud user accounts Login data for cloud user accoutns Details of cloud user account identification Contact data for cloud user accounts User-defined main data for cloud user accounts

Assigning permissions controls to cloud user accounts Assigning extended properties to cloud user accounts Locking and unlocking cloud user accounts Deleting cloud user accounts Displaying the cloud user account overview

Creating and editing cloud groups

General main data for cloud groups User-defined main data for cloud groups

Adding cloud groups to cloud groups Assigning permissions controls to cloud groups Assigning extended properties to cloud groups Displaying the cloud group overview Deleting cloud groups

Cloud system entitlements

Creating and editing cloud system entitlements

General main data for system entitlements User-defined main data for cloud user accounts

Assigning cloud system entitlements to cloud system entitlements Assigning extended properties to cloud system entitlements Displaying cloud system entitlement overviews Deleting cloud system entitlements

Cloud permissions controls

General main data for cloud permissions controls User-defined main data for cloud permissions controls Assigning cloud groups to cloud permissions controls Assigning cloud user accounts to cloud permissions controls Displaying an overview of the cloud permissions controls Deleting cloud permissions controls

Reports about objects in cloud target systems

Handling cloud objects in the Web Portal Basic data for managing a Universal Cloud Interface environment

Target system managers Job server for Universal Cloud Interface-specific process handling

Editing Job server for cloud target systems General main data of Job servers Specifying server functions

Configuration parameters for managing cloud target systems Default project template for cloud applications in the Universal Cloud Interface

Default project template for cloud applications in the Universal Cloud Interface

A default project template ensures that all required information is added in One Identity Manager. This includes mappings, workflows, and the synchronization base object. If you do not use a default project template you must declare the synchronization base object in One Identity Manager yourself.

Use a default project template for initially setting up the synchronization project. For custom implementations, you can extend the synchronization project with the Synchronization Editor.

The project template uses mappings for the following schema types.

Table 48: Mapping Universal Cloud Interface schema types to tables in the One Identity Manager schema
Schema type in Universal Cloud Interface	Table in the One Identity Manager Schema
UCIRoot	CSMRoot
UCIContainer	CSMContainer
UCIGroup	CSMGroup
UCIGroupInGroup	CSMGroupInGroup
UCIGroupHasItem	CSMGroupHasItem
UCIGroup1	CSMGroup1
UCIGroup1InGroup1	CSMGroup1InGroup1
UCIGroup2	CSMGroup2
UCIGroup2InGroup2	CSMGroup2InGroup2
UCIGroup3	CSMGroup3
UCIGroup3InGroup3	CSMGroup3InGroup3
UCIItem	CSMItem
UCIUser	CSMUser
UCIUserInGroup	CSMUserInGroup
UCIUserInGroup1	CSMUserInGroup1
UCIUserInGroup2	CSMUserInGroup2
UCIUserInGroup3	CSMUserInGroup3
UCIUserHasGroup	CSMUserHasGroup
UCIUserHasGroup1	CSMUserHasGroup1
UCIUserHasGroup2	CSMUserHasGroup2
UCIUserHasGroup3	CSMUserHasGroup3
UCIUserHasItem	CSMUserHasItem
QBMPendingChange	QBMPendingChange
QBMPendingChangeDetail	QBMPendingChangeDetail

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center