立即与支持人员聊天
与支持团队交流

Identity Manager 9.2.1 - Administration Guide for Integration with OneLogin Cloud Directory

Integration with OneLogin Cloud Directory Synchronizing a OneLogin domain
Setting up initial synchronization with a OneLogin domain Customizing the synchronization configuration Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)
Managing OneLogin user accounts and identities Managing memberships in OneLogin roles Login credentials for OneLogin user accounts Mapping OneLogin objects in One Identity Manager
OneLogin domains OneLogin user accounts OneLogin applications OneLogin roles OneLogin authentication methods OneLogin service providers OneLogin clients OneLogin scopes OneLogin policies OneLogin groups OneLogin privileges OneLogin custom user fields Reports about OneLogin objects
Handling of OneLogin objects in the Web Portal Base data for OneLogin domains Configuration parameters for managing OneLogin domains Default template for OneLogin domains Editing OneLogin system objects OneLogin connector settings

Removing OneLogin roles from an IT Shop shelf

To remove a role from individual IT Shop shelves

  1. In the Manager, select the OneLogin > Roles (non role-based login) category.

    - OR -

    In the Manager, select the Entitlements > OneLogin roles (role-based login) category.

  2. Select the role in the result list.

  3. Select Add to IT Shop.

  4. In the Remove assignments pane, remove the role from the IT Shop shelves.

  5. Save the changes.
Related topics

Removing OneLogin roles from all IT Shop shelves

To remove a roles from all IT Shop shelves

  1. In the Manager, select the OneLogin > Roles (non role-based login) category.

    - OR -

    In the Manager, select the Entitlements > OneLogin roles (role-based login) category.

  2. Select the role in the result list.

  3. Select the Remove from all shelves (IT Shop) task.

  4. Confirm the security prompt with Yes.

  5. Click OK.

    The role is removed from all shelves by the One Identity Manager Service. All requests and assignment requests are canceled along with this role as a result.

Related topics

Adding OneLogin roles automatically to the IT Shop

The following steps can be used to automatically add OneLogin roles to the IT Shop. Synchronization ensures that the OneLogin roles are added to the IT Shop. If necessary, you can manually start synchronization with the Synchronization Editor. OneLogin roles newly created in One Identity Manager also are added automatically to the IT Shop.

To add OneLogin roles automatically to the IT Shop

  1. In the Designer, set the QER | ITShop | AutoPublish | OLGRole configuration parameter.

  2. In order not to add OneLogin roles to the IT Shop automatically, in the Designer, set the QER | ITShop | AutoPublish | OLGRole | ExcludeList configuration parameter.

    This configuration parameter contains a listing of all OneLogin roles that should not be allocated to the IT Shop automatically. You can extend this list if required. To do this, enter the names of the roles in the configuration parameter. Names are listed in a pipe (|) delimited list. Regular expressions are supported.

  3. Compile the database.

The OneLogin groups are added automatically to the IT Shop from now on.

The following steps are run to add a OneLogin role to the IT Shop.

  1. A service item is determined for the OneLogin role.

    The service item is tested for each OneLogin role and modified if necessary. The name of the service item corresponds to the name of the OneLogin role.

    • The service item is modified for OneLogin roles with service items.

    • OneLogin roles without service items are allocated new service items.

  2. The service item is assigned to the OneLogin roles default service category.

  3. An application role for product owners is determined and the service item is assigned.

    Product owners can approve requests for membership in these OneLogin roles. The default product owner is the OneLogin role's owner.

    NOTE: The application role for the product owner must be added under the Request & Fulfillment | IT Shop | Product owner application role.

    • If the owner of the OneLogin role is already a member of an application role for product owners, this application role is assigned to the service item. Therefore, all members of this application role become product owners of the OneLogin role.

    • If the owner of the OneLogin role is not already a member of an application role for product owners, a new application role is created. The name of the application corresponds to the name of the owner.

      • If the owner is a user account, the user account's identity is added to the application role.

      • If this is an owners role, the identities of all this role's user accounts are added to the application role.

  4. The OneLogin role is labeled with the IT Shop option and assigned to the OneLogin roles IT Shop shelf in the Identity & Access Lifecycle shop.

Memberships in OneLogin roles can then be requested through the Web Portal.

NOTE: If a OneLogin role is irrevocably deleted from the One Identity Manager database, the associated service item is also deleted.

For more information about configuring the IT Shop, see the One Identity Manager IT Shop Administration Guide. For more information about requesting access requests in the Web Portal, see the One Identity Manager Web Portal User Guide.

Related topics

Assigning OneLogin user accounts directly to OneLogin roles

To react quickly to special requests, you can assign roles directly to user accounts. You cannot directly assign roles that have the Only use in IT Shop option set.

To assign user accounts directly to a role

  1. In the Manager, select the OneLogin > Roles category.

  2. Select the role in the result list.

  3. Select in the Assign user accounts task.

  4. In the Add assignments pane, assign the user accounts.

    TIP: In the Remove assignments pane, you can remove assigned user accounts.

    To remove an assignment

    • Select the user account and double-click .

  5. Save the changes.
Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级