立即与支持人员聊天
与支持团队交流

Identity Manager 8.2 - Administration Guide for Connecting to a Universal Cloud Interface

Managing Universal Cloud Interface environments Synchronizing a cloud application in the Universal Cloud Interface Provisioning object changes Managing cloud user accounts and employees Managing memberships in cloud groups Login information for cloud user accounts Mapping cloud objects in One Identity Manager
Cloud target systems Container structures Cloud user accounts Cloud groups Cloud system entitlements Cloud permissions controls Reports about objects in cloud target systems
Handling cloud objects in the Web Portal Basic data for managing a Universal Cloud Interface environment Configuration parameters for managing cloud target systems Default project template for cloud applications in the Universal Cloud Interface

Using password policies

The Cloud system password policy is predefined for cloud target systems. You can apply this password policy to cloud target system user account passwords (CSMUser.Password) or to a container.

If the cloud target systems' or containers' password requirements differ, it is recommended that you set up your own password policies for each cloud target system or container.

Furthermore, you can apply password policies based on the account definition of the user accounts or based on the manage level of the user accounts.

The password policy that is to be used for a user account is determined in the following sequence:

  1. Password policy of the user account's account definition.

  2. Password policy of the user account's manage level.

  3. Password policy of the user account's container.

  4. Password policy of the user account's target system.

  5. The One Identity Manager password policy (default policy).

IMPORTANT: If you do not use password policies that are specific to the target system, the One Identity Manager password policy default policy applies. In this case, ensure that the default policy does not violate the target systems requirements.

To reassign a password policy

  1. In the Manager, select the Cloud target systems > Basic configuration data > Password policies category.

  2. Select the password policy in the result list.
  3. Select Assign objects.
  4. Click Add in the Assignments section and enter the following data.

    • Apply to: Application scope of the password policy.

      To specify an application scope

      1. Click next to the field.

      2. Select one of the following references under Table:

        • The table that contains the base objects of synchronization.

        • To apply the password policy based on the account definition, select the TSBAccountDef table.

        • To apply the password policy based on the manage level, select the TSBBehavior table.

      3. Under Apply to, select the table that contains the base objects.

        • If you have selected the table containing the base objects of synchronization, next select the specific target system.

        • If you have selected the TSBAccountDef table, next select the specific account definition.

        • If you have selected the TSBBehavior table, next select the specific manage level.

      4. Click OK.

    • Password column: Name of the password column.

    • Password policy: Name of the password policy to use.

  5. Save the changes.

To change a password policy's assignment

  1. In the Manager, select the Cloud target systems > Basic configuration data > Password policies category.

  2. Select the password policy in the result list.

  3. Select the Assign objects task.

  4. In the Assignments pane, select the assignment you want to change.

  5. From the Password Policies menu, select the new password policy you want to apply.

  6. Save the changes.

Creating password policies

Predefined password policies are supplied with the default installation that you can use or customize if required. You can also define your own password policies.

To create a password policy

  1. In the Manager, select the Cloud target systems > Basic configuration data > Password policies category.

  2. Click in the result list.

  3. On the main data form, enter the main data of the password policy.

  4. Save the changes.
Detailed information about this topic

Editing password policies

Predefined password policies are supplied with the default installation that you can use or customize if required.

To edit a password policy

  1. In the Manager, select the Cloud target systems > Basic configuration data > Password policies category.

  2. In the result list, select the password policy.

  3. Select the Change main data task.

  4. Edit the password policy's main data.

  5. Save the changes.
Detailed information about this topic

General main data of password policies

Enter the following main data of a password policy.

Table 24: main data for a password policy

Property

Meaning

Display name

Password policy name. Translate the given text using the button.

Description

Text field for additional explanation. Translate the given text using the button.

Error Message

Custom error message generated if the policy is not fulfilled. Translate the given text using the button.

Owner (Application Role)

Application roles whose members can configure the password policies.

Default policy

Mark as default policy for passwords. This option cannot be changed.

NOTE: The One Identity Manager password policy is marked as the default policy. This password policy is applied if no other password policy can be found for employees, user accounts, or system users.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级