Documentation Home
> Sun Identity Manager Deployment Guide
Sun Identity Manager Deployment Guide
Book Information
Index
Numbers and Symbols
A
B
C
D
E
F
G
H
I
J
L
M
N
O
P
Q
R
S
T
U
V
W
X
Preface
Chapter 1 Working with Attributes
Related Chapters
What are Attributes?
Types of Attributes
Summary Attributes
Queryable Attributes
Inline Attributes
Extended Attributes
Operational Attributes
View Attributes
Resource User Attributes
Identity System User Attributes
Other Standard Attributes
MemberObjectGroups
creator, createDate, lastModifier and lastModDate
PropertyList
subType
authType
Using Attribute Conditions
Attribute Condition Operators
Implicitly ANDed
Example Scenario: Populating Organizations with User Member Rules
Example Scenario: Including All Users Without Administrative Roles
Using Secret Attributes
Chapter 2 Working with Authorization Types
What are Authorization Types?
How Identity Manager Uses Authorization Types
Why Use Authorization Types?
Architectural Features
Configuration:AuthorizationTypes Object
AuthType Element
Authorization Subtype Permissions
Authorization Types and Capabilities
AdminGroups Objects
EndUser Capability
Creating an Authorization Type
Assigning an Authorization Type to a Repository
Example: Setting End-User Authorization Types
Example: Using Authorization Types to Restrict Visibility on Resources
To Define a Resource-Specific Authorization Type
Example: Granting Access to a Specific Part of Identity Manager
Chapter 3 Data Loading and Synchronization
Types of Data Loading
Discovery
Load from File
Load from Resource
Create Bulk Action
Reconciliation
Full Reconciliation
Incremental Reconciliation
Active Sync
Summary of Data Loading Types
Load Operation Context
Managing Reconciliation
Reconciliation Policy
Correlation and Confirmation Rules
Correlation Rules
Confirmation Rules
CorrelationPlan Objects
Reconciliation Workflows
Pre-Resource Workflow
Per-Account Workflow
Post-Resource Workflow
Auditing Native Changes
Resource Scheduling
Reconcile Configuration Object
Managing Active Sync
How Active Sync-Enabled Adapters Work
Basic Steps of Adapter Processing
Active Sync Namespace
Using Rules
If the Adapter Does Not Find the User
Using Forms
Resource Form
User Form
Proxy Administrator and the User Form
Alternative Form to Process Attributes
Process Cancel Action
Launching Workflow Processes
Example: Disabling Accounts through Active Sync-Enabled Adapters
Chapter 4 Dataloading Scenario
Assessing Your Environment
Choosing the First Resource
Choosing the First Data Loading Process
Using Load from File
Using Load from Resource
Using Create Bulk Actions
Using Reconciliation
Preparing for Data Loading
Configuring an Adapter
Setting Account ID and Password Policies
Creating a Data Loading Account
Assigning User Forms
Linking to Accounts on Other Resources
Defining Custom Correlation Keys
To Define a Custom Correlation Key
Creating Custom Rules
Manually Linking Accounts
Using the Account Index
Enabling Self-Discovery
To Enable Self-Discovery
Example Scenarios
Active Directory, SecurID, and Solaris
Example Users
Loading Active Directory Accounts
To Load Active Directory Users
Results
Loading SecurID Accounts
Loading Solaris Accounts
LDAP, PeopleSoft, and Remedy
Example Users
Loading PeopleSoft Users
To Load PeopleSoft Users
Results of This Scenario
Loading LDAP Users
To Load LDAP Accounts
Results of This Scenario
Loading Remedy Users
To Load Remedy Accounts
Results of This Scenario
Expedited Bulk Add Scenario
To Perform a Bulk Add
Chapter 5 Data Exporter
What is Data Exporter?
Exportable Data Types
Data Exporter Architecture
Planning for Data Exporter
Database Considerations
Hibernate Support
Object/Relational Mapping
Database Tables
Space Requirements
Export Server Considerations
Loading the Default DDL
DB2
MySQL
Oracle
SQL Server
Upgrading Data Exporter
Customizing Data Exporter
Identity Manager ObjectClass Schema
Export Schema
Modifying the Warehouse Interface Code
Generating a New Factory Class
To Export Extended Attributes
Adding Localization Support for the WIC
To Add Localization Support for the WIC
Troubleshooting Data Exporter
Beans and Other Tools
Model Serialization Limits
Repository Polling Configuration
Tracing and Logging
Chapter 6 Configuring User Actions
Adding Custom Tasks
Setting Up Custom Task Authorization
To Set Up Authorization
Step 1: Create an AuthType
Step 2: Create an AdminGroup
Step 3: Grant Capabilities to Administrators
Adding a Task to the Repository
Configuring User Actions
To Configure User Actions
Chapter 7 Private Labeling of Identity Manager
Private Labeling Tasks
Architectural Features
Style Sheets
Default Text
Text Attributes
Default Style Settings
Customized File
JSP Files
WPMessages_en.properties File
Customizing Headers
Changing Header Appearance
Customizing Identity Manager Pages
Creating a Custom Message Catalog
Customizing the Home Page
Adding a List of Quick Links
To Add a Listof Quick Links
Changing the Default “Logged in as” Text
To Change the Default Text
Changing Page Title and Subtitle
Changing Background Image on the Login Page
Customizing the Browser Title Bar
To Replace the Product Name String
Changing Default Information Displayed in the Identity Manager User Interface Home Page
Changing the Appearance of the User Interface Navigation Menus
Changing Font Characteristics
Editing Font Characteristics
Example Entry
Sample Labeling Exercises
Replacing the Identity Manager Logo with a Custom Logo
Changing Masthead Appearance
To Change the Appearance of Identity Manager
Changing Navigation Tabs
Customizing the Identity Manager User Interface Navigation Bar
Customizing Navigation Links
Changing Tab Panel Tabs
Changing Sorting Table Header
Changing User / Resource Table Component
Changing Identity Manager Behavior on Commonly Used Pages
Miscellaneous Modifications: Admin Section of File
Miscellaneous Changes: User Section of the File
Chapter 8 Customizing Message Catalogs
Advantages of Custom Message Catalogs
How Identity Manager Retrieves Message Catalog Entries
Message Catalog Format
Creating a Customized Message Catalog
To Create a User-Defined Message Catalog
Example Message Catalog
Chapter 9 Developing Custom Adapters
Before You Begin
Intended Audience
Important Notes
Related Documentation
What is a Resource Adapter?
What Are Standard Resource Adapters?
What Are Active Sync-Enabled Resource Adapters?
What is a Resource Object?
What is a Resource Adapter Class?
Preparing for Adapter Development
Become Familiar with Adapter Source Code
Standard Java Header Information
PrototypeXML String
Resource Attributes
Defining Resource Attributes
Overwriting Resource Attributes
Required Resource Attributes
Identity Manager Account Attributes
Standard Adapter Schema Maps
Active Sync-Enabled Adapter Schema Maps
Using the Schema Map
Identity Template
Flat Namespaces
Hierarchical Namespaces
Login Configuration
Resource Methods
Considerations for Standard Resource Adapters
User Identity Template
Creating an Identity Template Out of Multiple User Attributes
Login Configuration and Pass-Through Authentication
To Manage Users Across Forests
Example Object Resource Attribute Declaration
Profile the Resource
Profiling a Standard Resource Adapter
Profiling an Active Sync-Enabled Resource Adapter
Decide Which Classes and Methods to Include
Review the REF Kit
Set Up the Build Environment
On Windows
To Set Up Your Build Environment in Windows
On UNIX
To Set Up Your Build Environment in UNIX
Writing Custom Adapters
Process Overview
How To Write a Standard Resource Adapter
To Create a Standard Adapter:
How To Write an Active Sync-Enabled Resource Adapter
To Create a Custom Active Sync-Enabled Adapter
Rename the Skeleton File
Edit the Source File
To Edit the Source File
Map the Attributes
Mapping Resource Attributes to Standard Account Attributes
Mapping Resource Attributes to Extended Schema Attributes
Specify the Identity Template
Write the Adapter Methods
How to Write Standard Resource Adapter-Specific Methods
Creating the Prototype Resource
Connecting with the Resource
Checking Connections and Operations
Defining Features
Disabling User Accounts
Enabling Pass-Through Authentication for Resource Types
To Enable Pass-Through Authentication on a Resource Type
How to Write Active Sync-Enabled Adapter Methods
Initializing and Scheduling the Adapter
Polling the Resource
Storing and Retrieving Adapter Attributes
Updating the Identity Manager Repository
Mapping the Changes to the Identity Manager Object
Shutting Down the Adapter
Configure the Adapter to Support Pass-Through Authentication
Define the Resource Object Components
Defining Resource Object Classes
LDAP-Based Resource Objects
Non-LDAP-Based Resource Objects
Defining Resource ObjectTypes
Defining Resource Object Features
Defining Resource Object Attributes
Defining Resource Forms
Installing Custom Adapters
To Install a Customized Resource Adapter
Testing Custom Adapters
Unit Testing Your Adapter
To Unit Test Your Adapter
Compatibility Testing Your Adapter
How the Compatibility Test Suite Works
How to Run the Compatibility Tests
To Run the Identity Manager Compatibility Test Suite
Example 1: Using the Default DataProvider to Run Compatibility Tests
Prepare the Test
To Prepare the Test
Execute the Test
To Execute the Compatibility Test
What Happened
Example 2: Adding More Data
Prepare the Test
To Prepare the Test
Execute the Test
To Execute the Test
What Happened
Example 3: Finishing the Test Configuration
Prepare the Test
To Prepare the Test
Execute the Tests
To Execute the Tests
What Happened
Example 4: Executing Javascript or Beanshell Script
Prepare the Test
To Prepare the Test
Execute the Tests
To Execute the Test
What Happened
Example 5: Running Tests from Inside the Web Container
Prepare the Test
To Prepare the Test
Execute the Tests
To Execute the Test
Testing the Resource Object
Viewing and Editing a Resource Object
To View and Edit a Resource Object
Testing the Resource Object in Identity Manager
Troubleshooting Custom Adapters
Maintaining Custom Adapters
Chapter 10 Editing Configuration Objects
Data Storage
Object Naming Conventions
Viewing and Editing Configuration Objects
IDM Schema Configuration Object
Adding an Extended Attribute to an Object
Extending the Role Object Class
UserUIConfig Object
RepositoryConfiguration Object
WorkItemTypes Configuration Object
SystemConfiguration Object
Controlling the Display of the Password Confirmation Popup
Configuring Delegate History List Length
Enabling Attribute Value Customization
Form and Workflow Save Behavior Customization
Login-Related Customizations
Enabling autocomplete for Login Pages
Displaying an Error Message During an Attempt to Provision a Disabled User
Launching the Password Login Workflow upon Login
PasswordSync-Related Customizations
Registering Scheduler Startup (for Clustered Environments)
Source Adapter Task Customization
Role Configuration Object
Types Attribute
displayName Attribute
authType Attribute
workItemTypes Attribute
features Attribute
Actions Attribute
List Columns Attribute
Other Options
End User Tasks Object
Refreshing User Objects
Chapter 11 Enabling Internationalization
Architectural Overview
Typical Entry
Enabling Support for Multiple Languages
Step One: Download and Install Localized Files
Before You Install
Download Message Catalog Files
Zip File Contents
Install Localized Files
Step Two: Edit the Waveset.properties File
To Edit the File
Maintaining ASCII Account IDs and Email Addresses During Anonymous Enrollment Processing
To Maintain Account ID and Email Address Values
© 2010, Oracle Corporation and/or its affiliates