立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Identity Manager 9.2 - Administration Guide for Connecting to Custom Target Systems

Managing custom target systems

One Identity Manager users for managing custom target systems Configuration parameters for managing custom target systems

Setting up scripted data provisioning in a custom target system

Creating the scripts for data provisioning in a custom target system Job server for provisioning data in a custom target system

General main data of Job servers Specifying server functions

Post-processing outstanding objects

Adding custom tables to the target system synchronization Post-processing outstanding objects

Managing user accounts and identities

Account definitions for user accounts

Creating account definitions Editing account definitions Main data for account definitions Editing manage levels Creating manage levels Assigning manage levels to account definitions Main data for manage levels Creating mapping rules for IT operating data Entering IT operating data Assigning account definitions to identities

Assigning account definitions to departments, cost centers, and locations Assigning account definitions to business roles Assigning account definitions to all identities Assigning account definitions directly to identities Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to custom target systems Deleting account definitions

Assigning identities automatically to user accounts

Editing search criteria for automatic identity assignment Finding identities and directly assigning them to user accounts Changing manage levels for user accounts Assigning account definitions to linked user accounts

Supported user account types

Default user accounts Administrative user accounts

Providing administrative user accounts for one identity Providing administrative user accounts for several people

Privileged user accounts

Setting deferred deletion for custom target system user accounts

Managing assignments of groups and system entitlements

Specifying types of system entitlements in use Assigning groups and system entitlements to user accounts in One Identity Manager

Prerequisites for indirect assignments of groups and system entitlements to user accounts Assigning groups to departments, cost centers, and locations Assigning system entitlements to departments, cost centers, and locations Assigning groups to business roles Assigning system entitlements to business roles Adding groups to system roles Adding system entitlements to system roles Adding groups to the IT Shop Adding system entitlements to the IT Shop Assigning user accounts directly to a group Assigning user accounts directly to a system entitlement Assigning groups directly to user accounts Assigning system entitlements directly to a user account

Effectiveness of memberships in groups and system entitlements Inheriting groups and system entitlements based on categories Overview of all assignments

Login credentials for user accounts

Password policies for user accounts

Predefined password policies Using password policies Editing password policies Creating password policies General main data of password policies Policy settings Character classes for passwords Custom scripts for password requirements

Checking passwords with a script Generating passwords with a script

Editing the password excluded list Verifying passwords Testing password generation

Initial password for new user accounts Email notifications about login data

Mapping custom target system objects in One Identity Manager

Custom target system identifiers

General main data for custom target systems Customizing data synchronization for custom target systems Defining categories for inheriting groups and system entitlements Specifying alternative names

Container structures in custom target systems

Main data for containers

User accounts in custom target systems

Creating and editing user accounts User account main data Assigning extended properties to user accounts Assigning permissions controls to user accounts Disabling user accounts Deleting and restoring user accounts Displaying the user account overview

Groups in custom target systems

Main data for groups Assigning groups to groups Assigning extended properties to groups Assigning permissions controls to groups Displaying the group overview

System entitlements in custom target systems

System entitlement main data Assigning system entitlements to system entitlements Assigning extended properties to system entitlements Displaying system entitlement overviews

Permissions controls in custom target systems

Main data for permissions controls Assigning user accounts to permissions controls Assigning groups to permissions controls Displaying the permissions control overview

Reports about custom target systems

Treatment of custom target system objects in the Web Portal Basic configuration data for custom target systems

Target system managers for custom target systems Target system types for custom target systems Configuring display of custom schema extensions for custom target systems

Configuration parameters for managing custom target systems

Assigning account definitions to business roles

NOTE: This function is only available if the Business Roles Module is installed.

You can assign account definitions to business roles in order to assign them to identities through business roles.

To add account definitions to hierarchical roles

In the Manager, select the Custom target systems > Basic configuration data > Account definitions > Account definitions category.
Select an account definition in the result list.
Select the Assign business roles task.
In the Add assignments pane, select the role class and assign business roles.
TIP: In the Remove assignments pane, you can remove assigned business roles.

To remove an assignment
- Select the business role and double-click .
Save the changes.

Related topics

Assigning account definitions to all identities

Use this task to assign the account definition to all internal identities. Identities that are marked as external do not obtain this account definition. Once a new internal identity is created, they automatically obtain this account definition. The assignment is calculated by the DBQueue Processor.

IMPORTANT: Only run this task if you can ensure that all current internal identities in the database and all pending newly added internal identities obtain a user account in this target system.

To assign an account definition to all identities

In the Manager, select the Custom target systems > Basic configuration data > Account definitions > Account definitions category.
Select an account definition in the result list.
Select the Change main data task.
Select the Disable automatic assignment to identities task.
Confirm the security prompt with Yes.
Save the changes.

NOTE: To automatically remove the account definition assignment from all identities, run the Disable automatic assignment to identities task. The account definition cannot be reassigned to identities from this point on. Existing assignments remain intact.

Related topics

Assigning account definitions directly to identities

Account definitions can be assigned directly or indirectly to identities. Indirect assignment is carried out by allocating identities and account definitions in company structures, like departments, cost centers, locations, or business roles.

To react quickly to special requests, you can assign account definitions directly to identities.

To assign an account definition directly to identities

In the Manager, select the Custom target systems > Basic configuration data > Account definitions > Account definitions category.
Select an account definition in the result list.
Select the Assign to identities task.
In the Add assignments pane, add identities.
TIP: In the Remove assignments pane, you can remove assigned identities.

To remove an assignment
- Select the identity and double-click .
Save the changes.

Related topics

Assigning account definitions to system roles

NOTE: This function is only available if the System Roles Module is installed.

Use this task to add an account definition to system roles.

NOTE: Account definitions with the Only use in IT Shop option set can only be assigned to system roles that also have this option set.

To add account definitions to a system role

In the Manager, select the Custom target systems > Basic configuration data > Account definitions > Account definitions category.
Select an account definition in the result list.
Select the Assign system roles task.
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.

To remove an assignment
- Select the system role and double-click .
Save the changes.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center