Sun Identity Manager 8.1 Business Administrator's Guide

Book Information
Index
- A
- B
- C
- D
- E
- F
- G
- H
- I
- J
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X
Preface
Chapter 1 Identity Manager Overview
- The Big Picture
- Identity Manager Objects
Chapter 2 Getting Started with the Identity Manager User Interface
- Identity Manager Administrator Interface
- Logging in to the Identity Manager Administrator Interface
- Identity Manager End-User Interface
  - The Five End-User Interface Tabs
- Logging in to the Identity Manager End-User Interface
  - To Open the End-User Interface
  - Retrieving Forgotten User IDs
- Help and Guidance
  - Identity Manager Help
  - Identity Manager Guidance
- The Identity Manager Debug Page
- Identity Manager IDE
- Where to Go from Here
Chapter 3 User and Account Management
- The Accounts Area of the Interface
- Creating Users and Working with User Accounts
- Bulk Account Actions
  - Launching Bulk Account Actions
  - Correlation and Confirmation Rules
    - Correlation Rules
      - To Set an Extended Attribute as Queryable
    - Confirmation Rules
- Managing Account Security and Privileges
- User Self-Discovery
  - Enabling Self-Discovery
    - To Enable Self-Discovery
- Anonymous Enrollment
Chapter 4 Configuring Business Administration Objects
- Configuring Identity Manager Policies
- Customizing Email Templates
- Configuring Audit Groups and Audit Events
- Remedy Integration
- Configuring the End-User Interface
  - To Set Options for Displaying Information in the End-User Interface
  - To Enable Process Diagrams in the End-User Interface
- Registering Identity Manager
  - Registering Identity Manager from the Console
    - Using the register Command
      - register Command Usage
      - register Command Options
    - To Register Identity Manager from the Console
  - To Register Identity Manager from the Administrator Interface
- Editing Identity Manager Configuration Objects
Chapter 5 Roles and Resources
- Understanding and Managing Roles
- Understanding and Managing Identity Manager Resources
- Understanding and Managing External Resources
Chapter 6 Administration
- Understanding Identity Manager Administration
- Delegated Administration
- Creating and Managing Administrators
- Understanding Identity Manager Organizations
- Creating Organizations
- Understanding Directory Junctions and Virtual Organizations
- Understanding and Managing Capabilities
  - Capabilities Categories
  - Working with Capabilities
- Understanding and Managing Admin Roles
- The End User Organization
  - The End User Controlled Organization Rule
- Managing Work Items
- Approving User Accounts
Chapter 7 Data Loading and Synchronization
- Data Synchronization Tools: Which to Use?
- Account Discovery Features
- Account Reconciliation
- Active Sync Adapters
Chapter 8 Reporting
- Working with Reports
- Identity Manager Reports
- Auditor Reports
- Working with Graphs
- Working with Dashboards
- System Monitoring
  - Tracked Event Configuration
- Risk Analysis
  - To Create a Risk Analysis Report
  - To Schedule a Risk Analysis Report
Chapter 9 Task Templates
- Enabling the Task Templates
  - To Map Process Types
  - To Configure a Task Template
- Configuring the Task Templates
Chapter 10 Audit Logging
- Audit Logging Overview
- What Does Identity Manager Audit?
- Creating Audit Events From Workflows
- Audit Configuration
- Database Schema
- Audit Log Configuration
  - Resizing Column Length Limits
- Removing Records from the Audit Log
- Using Custom Audit Publishers
- Developing Custom Audit Publishers
Chapter 11 PasswordSync
- What is PasswordSync?
- Before You Install
- Installing and Configuring PasswordSync on Windows
- Deploying PasswordSync on the Application Server
- Configuring PasswordSync with a Sun JMS Server
- Testing Your Configuration
- Debugging PasswordSync on Windows
- Uninstalling PasswordSync on Windows
- Frequently Asked Questions about PasswordSync
Chapter 12 Security
- Security Features
- Limiting Concurrent Login Sessions
- Managing Passwords
- Pass-Through Authentication
- Configuring Authentication for Common Resources
- Configuring X509 Certificate Authentication
- Cryptographic Use and Management
- Managing Server Encryption
  - To Access the Manage Server Encryption Page
  - To Configure Server Encryption
- Using Authorization Types to Secure Objects
- Security Practices
  - At Setup
  - During Use
    - To Change the Session Timeout Value
Chapter 13 Identity Auditing: Basic Concepts
- About Identity Auditing
- Goals of Identity Auditing
- Understanding Identity Auditing
  - Policy-Based Compliance
  - Periodic Access Reviews
- Working with Identity Auditing in the Administrator Interface
- Enabling Audit Logging
- About Audit Policies
Chapter 14 Auditing: Audit Policies
- Working with Audit Policies
  - Audit Policy Rules
- Creating an Audit Policy
- Editing an Audit Policy
- Deleting an Audit Policy
- Troubleshooting Audit Policies
- Assigning Audit Policies
  - To Assign a User-Level Policy
  - Resolving Auditor Capabilities Limitations
    - To Add Capabilities
Chapter 15 Auditing: Monitoring Compliance
- Audit Policy Scans and Reports
  - Scanning Users and Organizations
    - To Scan a User Account or Organization
  - Working with Auditor Reports
    - Creating an Auditor Report
      - To Create an Auditor Report
    - Configuring the Audited Attribute Report
- Compliance Violation Remediation and Mitigation
- Periodic Access Reviews and Attestation
- Access Review Remediation
Chapter 16 Data Exporter
- What is Data Exporter?
- Planning to Implement Data Exporter
  - To Implement Data Exporter
- Configuring Data Exporter
- Testing Data Exporter
  - To Start the Data Warehouse Exporter Launcher
- Configuring Forensic Queries
- Maintaining Data Exporter
  - Monitoring Data Exporter
  - Monitoring Logging
    - Audit Logs
    - System Logs
Chapter 17 Service Provider Administration
- Overview of Service Provider Features
  - Enhanced End-User Pages
- Initial Configuration
  - Edit Main Configuration
  - Edit User Search Configuration
    - To Configure Default Search Settings for Searching Service Provider Users
- Transaction Management
- Delegated Administration for Service Provider Users
- Administering Service Provider Users
- Service ProviderUser Synchronization
- Configuring Service Provider Audit Events
Appendix A lh Reference
- lh Command Syntax
  - Usage Notes
- lh Command Examples
- syslog Command
  - syslog Command Usage
  - syslog Command Options
Appendix B Audit Log Database Schema
- Oracle Database Type
- DB2 Database Type
- MySQL Database Type
- SQL Server Database Type
- Audit Log Database Mappings
Appendix C User Interface Quick Reference
- Identity Manager Interface Task Reference
Appendix D Capabilities Definitions
- Task-Based Capabilities Definitions
- Functional Capabilities Definitions
Glossary