Identity Manager End-User Interface

The Identity Manager end-user interface (also known as the “Identity Manager User interface”) presents a limited view of the Identity Manager system. This view is specifically tailored to users without administrative capabilities.

For instructions on how to log on to the end-user interface, see Logging in to the Identity Manager End-User Interface.

A user can perform various activities from the User interface, such as changing their password, performing self-provisioning tasks, and managing work items and delegations.

Identity Manager can be configured so that users can request an account by clicking a link on the end-user interface login page. For details, see Anonymous Enrollment.

The Five End-User Interface Tabs

The end-user interface is organized into five sections:

Home Tab

When a user logs in to the Identity Manager User interface, any pending work items and delegations for the user are displayed on the Home tab, as illustrated in the following figure.

Figure 2–2 User Interface (Home Tab)

The Home tab provides quick access to any pending items. Users can click an item in the list to respond to a work item request or perform other available actions.

Work Items Tab

The Work Items tab is further divided into separate Approvals, Attestations, Remediations, and Other tabs. In this area of the user interface users can approve or reject any pending work items that the user owns or has the authority to act on.

Requests Tab

The Requests tab has two subtabs: Launch Requests and View.

On the Launch Requests tab users have two choices: Update My Roles and Update My Resources.

• On the Update My Roles page, users can request from a list of available roles that may be appropriate for the user. When the end-user submits a role request, a work item is generated and an approval notification is sent to the designated approvers for that role. End-users can also request that they be removed or deassigned from one or more roles.

  See the Chapter 5, Roles and Resources chapter for information on how to create optional roles that end-users can request access to.

• On the Update My Resources page, users can request from a list of individual resources that may be appropriate for the user. As with role-requests, resource-requests generate work items that require an approval before they can be processed.

The View subtab displays status details for requests submitted by the user. From this area users can view the process status and task results for the requests they submit.

Delegations Tab

From the Delegations tab, users can delegate work items to other Identity Manager users. For example, a user who is the assigned approver for one or more roles can designate that future approval work items be sent to a colleague for a certain amount of time while the user is away on vacation. Using the Delegations page, users can create and manage delegations without requiring the assistance of an administrator.

Profile Tab

End-users can manage their Identity Manger password and account attribute settings from the Profile tab. This tab is divided into the following four subtabs:

• Change Password. End-users can change their password on a selected resource or on all resources.

• Account Attributes. End-users can change certain attributes, such as the account email address that Identity Manager sends account notifications to.

• Authentication Questions. Used to manage authentication questions and answers for the user account.

• Access Privileges. Lists the user’s currently assigned role and resource assignments.