Chat now with support
Chat with Support

Identity Manager 9.3 - Administration Guide for Connecting to Cloud Applications

Mapping cloud applications in One Identity Manager Synchronizing cloud applications through the Universal Cloud Interface Provisioning object changes Mapping cloud objects in One Identity Manager
Cloud applications Container structures in cloud applications User accounts in cloud applications Groups and system entitlements in cloud applications Permissions controls in a cloud application
Base data for managing cloud applications Troubleshooting a cloud application connection Default project template for cloud applications Cloud system object processing methods Configuration parameters for managing cloud applications

Editing cloud applications

The cloud application general main data is displayed in the Manager. Here you can assign the operators and specify alternative column names. You can also add a cloud application in the Manager if required.

To display the main data of a cloud application and assign operators

  1. In the Manager, select the Universal Cloud Interface > Basic configuration data > Cloud applications category.

  2. Select a cloud application in the result list.

  3. Select the Change main data task.

  4. To handle provisioning processes manually in the Web Portal, select an application role for operators in the Operator field.

  5. Save the changes.

TIP: You can also display cloud application properties in the Universal Cloud Interface > <cloud application> category.

Detailed information about this topic

General main data for cloud applications

The following general main data is displayed for a cloud application. To handle manual provisioning operations, assign an application role for operators.

Table 14: Cloud application main data

Property

Description
Cloud application Name of the cloud application.
Canonical name Full name of the cloud application. The canonical name is made up of the server's DNS name or it's URL respectively, the port and the service's URI.

Example: identities.example.net:8080/scim/v2

Distinguished name The cloud application's distinguished name. This distinguished name is used to form distinguished names for child objects.

Syntax example: DC = <canonical name>

Display name Name for displaying the cloud application in One Identity Manager tools.
Operator Application role in which the cloud operators are defined. Operator edit manual provisioning processes for the cloud application that they are assigned to. Every cloud application can be assigned to other operators.

Select the One Identity Manager application, whose members are allowed to edit manual provisioning processes. Use the button to add a new application role.

Types of system entitlements used

Types of system entitlements to which user accounts can be assigned in this cloud application.

User account has memberships

Specifies for which types of system entitlements, assignments are maintained in the user accounts.

Example:

In the System entitlement types used menu, the values Group and System entitlement 1 are selected. In the User account has memberships menu, only the value System entitlement 1 is selected.

The assignments of user accounts to groups are saved with the groups, the assignment of user accounts to system entitlements 1 are saved with the user accounts.

Description

Text field for additional explanation.

Manual provisioning

Specifies whether changes to cloud objects in the One Identity Manager database are automatically provisioned in the cloud application. If this option is not set, processes for automatic provisioning of object modifications are configured.

Set this option, if object modifications are not allowed to be published automatically in the cloud application. Use the Operations Support Web Portal to transfer the changes to the cloud application.

IMPORTANT: If you set this option, you must perform regular and frequent synchronization to ensure that data remains consistent between the One Identity Manager database and the cloud application.

For more information about managing provisioning processes, see the One Identity Manager Operations Support Web Portal User Guide.

User account deletion not permitted Specifies whether user accounts in the cloud application can be deleted. If this option is set, user account can only be disabled.
Related topics

Specifying alternative names

You can use alternative names for each cloud application to improve how different objects types of a cloud application are presented.

Alternative names for tables are used for displaying object types in the Manager's navigation, as list titles for result lists or on the overview forms, for example, and alternative names for columns can be used for displaying input fields on main data forms or overview forms.

To specify alternative column names

  1. In the Manager, select the Universal Cloud Interface > Basic configuration data > Cloud applications category.

  2. In the result list, select a cloud application and select the Change main data task.

  3. Switch to the Alternative names tab.

    This displays all the default names for the tables and columns.

  4. Enter any name in the login language in use.

  5. Save the changes.

Editing the synchronization project for a cloud application

Synchronization projects in which a Cloud application is already used as a base object can also be opened in the Manager. You can, for example, check the configuration or view the synchronization log in this mode. The Synchronization Editor is not started with its full functionality. You cannot run certain functions, such as, running synchronization or simulation, starting the target system browser and others.

NOTE: The Manager is locked for editing throughout. To edit objects in the Manager, close the Synchronization Editor.

To open an existing synchronization project in the Synchronization Editor:

  1. In the Manager, select the Universal Cloud Interface > Basic configuration data > Cloud applications category.

  2. Select the cloud application in the result list.

  3. Select the Change main data task.

  4. Select the Edit synchronization project... task.

Related topics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating