Previous      Contents
Sun[TM] Identity Manager 8.0 Administration

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

Index

A

Access Review Detail Report Administrator capability  1

access reviews  1

access scans

creating  1

modifying  1

Account Administrator capability  1

account attributes  1, 2

account IDs

for additional approvers  1

for approvals  1

for escalating approvals  1

for notification recipients  1, 2

account index

examining  1

reports  1

searching  1

working with  1

account index report

required capabilities  1

Account Management event group  1

Accounts area, Administrator interface  1

actions

extended  1

Active Sync adapters

changing polling intervals  1

editing  1

logging settings  1

logs  1

overview  1

performance tuning  1

setting up  1

specifying host  1

starting  1

stopping  1

Add Attribute button  1, 2, 3

Admin Report Administrator capability  1

Admin Role Administrator capability  1

admin roles

assigning user form to  1

creating and editing  1

overview  1, 2

user role  1

administration, delegated  1

administration, understanding Identity Manager  1

administrator

authentication questions  1

creating  1

customizing name display  1

filtering views  1

passwords  1

Administrator Interface  1

Accounts area  1

Administrators List

choosing approvers  1, 2, 3

choosing notification recipients  1, 2

applications, disabling access  1

approvals

categories  1

configuring  1, 2

disabling  1

enabling  1, 2

escalated  1, 2, 3, 4, 5, 6

forms  1

Approvals tab

configuring  1, 2

description  1, 2

overview  1

approvers

additional  1, 2, 3, 4

configuring  1

configuring notifications  1

organizational  1

resource  1

role  1

setting up  1

Assign User Capabilities capability  1

attestation  1

approving entitlements  1

delegating  1

managing  1

attributes

adding to approval forms  1, 2

constructing queries  1

default  1, 2

default display names  1

deriving account IDs  1, 2, 3, 4, 5

editing values  1, 2

removing from approval form  1

specifying for task approvals  1

specifying from account data  1

specifying in task names  1

user account  1

user.global.email  1

user.waveset.accountId  1

user.waveset.organization  1

user.waveset.resources  1

user.waveset.roles  1

waveset.accountId  1

audit configuration  1

audit configuration groups  1

audit events, creating  1

audit log  1

column length limit configuration  1, 2

data truncation  1

database mappings  1

detecting tampering in  1

tampering prevention  1

audit policies

about  1

assigning remediators to  1

assigning workflows to  1

creating  1

creating rules  1

debugging rules  1

editing  1

importing remediation workflow for  1

required capabilities  1

Audit Policy Administrator capability  1

Audit Policy Rule Wizard  1

Audit Report Administrator capability  1

audit scans  1

Audit tab

configuring  1, 2

description  1

auditconfig.xml file  1

auditing

configuration  1

configuring  1, 2

data storage

waveset.log  1

waveset.logattr  1

extendedActions  1

extendedResults  1

extendedTypes  1

filterConfiguration  1

overview  1

provisioner  1

session  1

view handlers  1

workflow  1, 2, 3

auditing, configuring task template  1

Auditor Remediator capability  1

auditor reports  1

Auditor Report Administrator capability  1

creating  1

authentication

configuring for common resources  1

questions  1

user  1

X509 certificate-based  1

authorization types  1

B

background, running tasks in the  1

1

bulk actions

action lists  1

confirmation rules  1, 2

correlation rules  1

on user accounts  1

types of  1

view attributes  1

bulk capabilities

Bulk Account Administrator  1

Bulk Change Account Administrator  1

Bulk Change User Account Administrator  1

Bulk Create User  1

Bulk Delete User  1

Bulk Deprovision User  1

Bulk Disable User  1

Bulk Enable User  1

Bulk Unassign User  1

Bulk Unlink User  1

Bulk Update User  1

Bulk User Account Administrator  1

Bulk Resource Actions  1

Business Process Editor (BPE)  1, 2

buttons

Add Attribute  1, 2, 3

Delete Identity Manager Account  1

Edit Mappings  1, 2

Enable  1

Escalate the approval  1

Execute a task  1

Remove Selected Attribute(s)  1, 2, 3

Timeout Action  1

C

capabilities

assigning  1

categories  1

creating  1

editing  1

functional hierarchy  1

overview  1

renaming  1

user assignment of  1

Capability Administrator capability  1

certificate-based authentication  1

Change capabilities

Change Account Administrator  1

Change Active Sync Resource Administrator  1

Change Password Administrator  1

Change Resource Password Administrator  1

Change User Account Administrator  1

Changes Outside Identity Manager event group  1

com.waveset.object.Type class  1

com.waveset.security.Right objects  1

com.waveset.session.WorkflowServices application  1, 2

1

common resources, configuring authentication for  1

Compliance Management event group  1

configuration, audit  1

Configure Audit capability  1

Configure Form and Process Mappings page  1

Configure Tasks tabs  1

configuring

additional approvers  1

approval forms  1

approvals  1, 2

audit groups  1

Audit tab  1, 2

auditing  1, 2

auditing task template  1

Create User Template  1

Data Exporter  1

email notifications  1

forensic queries  1

Identity Manager server settings  1

notifications  1, 2

Password Sync  1, 2

Provisioning tab  1

Service Provider feature  1

signed approvals  1

Sunrise and Sunset tab  1, 2

synchronization  1

task templates  1

timeouts  1, 2, 3

Update User Template  1

warehouse  1

warehouse task  1

confirmation rules  1, 2

constraint rules, login  1

Control Active Sync Resource Administrator capability  1

controlled organizations

scoping  1

user assignment of  1

convertDateToString  1, 2

Correlate via X509 Certificate subjectDN  1

correlation rules  1

Create command  1

Create User capability  1

Create User Template

configuring  1

description  1

mapping processes  1

CreateOrUpdate command  1

createUser  1, 2

creating

access scans  1

audit policies  1

audit policy rules  1

forensic queries  1

creation tasks, suspending  1

cryptography

encryption keys  1

1

protected data  1

CSV format  1, 2

extracting to  1

custom resources  1

D

dashboards, grouping reports  1

Data Exporter  1

audit logs  1

configuration  1

configuration object  1

data types  1

introduction  1

models  1

monitoring  1

planning  1

read and write connections  1

scheduling  1

system log  1

testing  1

warehouse configuration  1

warehouse task  1

data synchronization

Active Sync adapters  1

discovery  1

reconciliation  1

tools  1

data transformation

before provisioning  1

during provisioning  1

Data Transformations tab

configuring  1

description  1

data types  1

database

Data Exporter connections  1

DB2  1

key mappings  1

MySQL  1

Oracle  1

schema  1

Sybase  1

date format strings  1, 2, 3

DB2 audit schema  1

debugging audit policy rules  1

debugging PasswordSync  1

default server settings  1

defaults

approval enablements  1

approval form attributes  1, 2

attribute display names  1

process type  1

task names  1

delegated administration  1

delegating work items  1

Delete command  1

Delete Identity Manager Account button  1

Delete User capability  1

Delete User Template

description  1

mapping processes  1

DeleteAndUnlink command  1

deleteUser  1

deleting

suspending deletion tasks  1

user accounts  1, 2

deploying PasswordSync  1

Deprovision User capability  1

deprovisioning

configuring sunsets  1

user accounts  1, 2, 3, 4

detection, log tampering  1

dictionary policy

configuring  1

implementing  1

overview  1

selecting  1

directory junctions

overview  1

setting up  1

directory resource  1

Disable command  1

Disable User capability  1

disabling approvals  1, 2

discovery

extract to file  1

load from file  1

load from resource  1

overview  1

documentation

overview  1

E

Edit Mappings button  1, 2

edit policy page  1

Edit Process Mappings page  1

Edit Task Template pages

Create User Template  1, 2

Delete User Template  1, 2

Update User Template  1, 2

editing

attribute values  1, 2

process mappings  1

task names  1

task templates  1

email notifications, configuring  1, 2

email settings, PasswordSync  1

email templates  1, 2

customizing  1

HTML and links  1

overview  1, 2

variables  1

Enable button  1

Enable command  1

Enable User capability  1

enabledEvents attribute  1

enabling

approval timeouts  1

approvals  1, 2

process mappings  1

task templates  1

enabling user accounts  1

encryption keys, server  1

Escalate the approval button  1

escalated approvals

timing out  1, 2, 3, 4, 5, 6

event groups

account management  1

attributes  1

changes outside Identity Manager  1

compliance management  1

login/logoff  1

resource management  1

role management  1

security management  1

task management  1

events, creating audit  1

Execute a task button  1

extendedActions  1, 2

extendedObjects attribute  1

extendedResults  1, 2

extendedTypes  1, 2

extract to file  1, 2

F

field-level help  1

filterConfiguration  1, 2

finding service provider users  1

finding user accounts  1

forensic queries

creating  1

loading  1

overview  1

saving  1

forms

adding attributes  1

configuring approval  1

currently configured  1, 2

editing  1

Notification  1

task approval  1

FormUtil method  1, 2

functional capabilities  1

G

gateway keys  1

General tab

description  1

Global Resource Policy  1

glossary  1

graphical reports  1

guidance, Identity Manager  1

H

help, online  1

I

1

identity auditing

tasks  1

understanding  1

Identity Manager

about administration  1

account index  1

admin roles  1

capabilities  1, 2

Data Exporter  1

database  1

goals  1

help and guidance  1

interfaces

Identity Manager IDE  1

User  1

objects  1, 2, 3

organizations  1, 2

overview  1

policies  1

product registration  1

resource groups  1, 2

resources  1, 2, 3

roles  1, 2

server settings  1

user account  1

deleting  1

Identity Manager terms  1

Identity Manager Work Items  1

Identity system attribute names  1

identity system parameters, resources  1

identity template  1

identity, user account  1

IDM Schema Configuration

capability  1

configuration object  1

IDMXUser  1

Import User capability  1

Import/Export Administrator capability  1

installing Microsoft .NET 1.1  1

installing PasswordSync

prerequisites  1

procedures  1

J

JConsole

configuring as a JMX client  1

using as a JMX client to view audit events  1, 2

JMS listener adapter, configuring for PasswordSync  1

JMS settings, PasswordSync  1

JMX  1

and audit logging  1

and server polling  1

configuring a JMX client  1

JMX management beans  1

K

keys

gateway  1

server encryption  1

L

LDAP

resource queries  1, 2

server  1

lh command

class  1

command argument  1

syslog  1

usage  1

listing process mappings  1

load

from file  1, 2

from resource  1, 2

login

applications  1

editing  1

constraint rules  1

correlation rule  1

module groups  1

editing  1

modules

editing  1

Login Administrator capability  1

login applications, disabling access  1

Login/Logoff Audit Event Group  1

M

Managed Resources page  1

ManageResource workflow  1

Managing Access Reviews  1

managing server encryption  1

mapping

process types  1, 2

processes  1

verifying  1

mappings for audit log  1

MBeans  1

methods

determining approval timeouts  1

determining approvers  1

determining deprovisioning  1

determining sunrises/sunsets  1

FormUtil  1, 2

Microsoft .NET 1.1  1

moving user accounts  1

MySQL audit schema  1

N

notification recipients

deriving account IDs  1, 2

specifying by attribute  1

specifying by query  1

specifying by rule  1

specifying from Administrators list  1

specifying users  1

Notification tab

configuring  1, 2

description  1

notifications

configuring  1, 2

setting up in PasswordSync  1

transforming user account data  1

O

objects, Identity Manager  1, 2

securing  1

online help  1

Oracle audit schema  1

Organization Administrator capability  1

organization approvals  1

organizations

control assignment  1

creating  1

overview  1, 2

user assignment  1

virtual  1

P

pages

Configure Form and Process Mappings  1

Edit Process Mappings  1

Edit Task Template Create User Template  1, 2

Edit Task Template Delete User Template  1, 2

Edit Task Template Update User Template  1, 2

pass-through authentication  1

Password Administrator capability  1

password management  1

password policies

character type rules  1

dictionary policy  1

forbidden attributes  1

forbidden words  1

history  1

implementing  1

length rules  1

setting  1

password string quality policies  1

passwords

challenging administrator for  1

changing administrator  1

login applications  1

PasswordSync

configuring  1, 2

debugging  1

deploying  1

email settings  1

frequently asked questions  1

installation prerequisites  1

installing  1

JMS listener adapter, configuring  1

JMS settings  1

overview  1

proxy server configuration  1

server configuration  1

setting up notifications  1

Synchronize User Password workflow  1

uninstalling  1

uninstalling previous versions  1

Periodic Access Reviews

about  1

access scans  1

attestation  1

entitlements  1

launching  1

managing progress of  1

planning for  1

reports  1

scheduling  1

terminating  1

workflow process  1

policies

account ID  1

audit  1

dictionary  1

Global Resource Policy  1

Identity Manager account  1

overview  1

reconciliation  1

resource password  1, 2

Policy Administrator capability  1

policy violations

during access scans  1

forwarding remediation requests  1

mitigating  1

remediating  1

prevention, tampering  1

process diagrams

enabling in the Administrator interface  1

enabling in the end-user interface  1

process mappings

editing  1

enabling  1

listing  1

required  1

verifying  1

process types

createUser  1

default  1

mapping  1, 2, 3

removing  1

selecting  1

updateUser  1

product registration  1

provisioner auditing  1

provisioning

data transformations  1

dates  1

in the background  1

Retry links  1

sunrises  1

times  1

transforming data before  1

Provisioning tab

configuring  1

description  1

proxy server configuration, PasswordSync  1

publishers  1

Q

queries

comparing attributes  1, 2

deriving approvers account IDs  1, 2, 3

deriving notification recipients account IDs  1, 2

LDAP resource  1, 2

resource attributes  1, 2

R

Reconcile Administrator capability  1

Reconcile Report Administrator capability  1

Reconcile Request Administrator capability  1

reconcile with resources  1

reconciler settings  1

reconciliation

overview  1

policies  1

policies, editing  1

starting  1

viewing status  1

reconciliation report  1

registering Identity Manager  1

remediation

about  1

assigning a workflow  1

forwarding requests  1

mitigating violations  1

remediating violations  1

required capabilities  1

Standard Remediation Workflow  1

viewing requests  1

Remedy integration  1

Remedy Integration Administrator capability  1

Remove Selected Attribute(s) button  1, 2, 3

Rename User capability  1

renaming user accounts  1

Report Administrator capability  1

Reports

and Service Level Agreements  1

AuditLog  1

auditor type  1

defining  1

defining graphical  1

downloading data  1

Individual User AuditLog Reports  1

Real Time  1, 2

renaming  1

risk analysis  1

running  1

scheduling  1

summary  1

SystemLog  1

usage  1, 2

Workflow Reports  1, 2, 3, 4

working with  1, 2

working with dashboards  1

Required Process Mappings section  1

Reset Password Administrator capability  1

Reset Resource Password Administrator capability  1

resetting user account passwords  1

resource accounts

deleting Identity Manager accounts  1

deprovisioning  1, 2

unassigning  1, 2

unlinking  1

Resource Administrator capability  1

resource approvals  1

resource attributes  1

Resource Group Administrator capability  1

resource groups  1, 2

Resource Management event group  1

Resource Object Administrator capability  1

Resource Password Administrator capability  1

Resource Report Administrator capability  1

Resource Wizard  1

resources  1

account attributes  1, 2, 3

adapter  1

bulk operations  1

creating  1

custom  1

Global Resource Policy  1

Identity Manager  1

identity system parameters  1

identity template  1

managing  1

overview  1

parameters  1

querying  1, 2, 3

setting timeout values  1

Resources area  1

results

extended  1

Retry links, configuring  1

retrying tasks  1

Risk analysis  1

Risk Analysis Administrator capability  1

Role Administrator capability  1

Role Management event group  1

Role Report Administrator capability  1

roles  1, 2

activation and deactivation dates  1

admin  1

and resources  1, 2, 3, 4

approving  1, 2

assigning  1, 2, 3, 4, 5

configuring  1, 2

creating  1

deferred task scanner  1

deleting  1

editing  1

editing assigned resource attribute values  1

enabling and disabling  1

finding users assigned to a role  1, 2

notifications  1, 2

overview  1, 2, 3

removing a resource from a role  1

removing a role from a role  1, 2

removing roles assigned to users  1

role exclusions  1

role owners  1

role types  1, 2

role-assignment rules  1

searching for  1

synchronizing Identity Manager roles and resource roles  1

update role users task  1

updating users  1

viewing  1

rule-driven assignment  1

rules

currently configured  1

evaluating to derive account IDs  1, 2, 3, 4, 5

for access reviews  1

for data transformation  1

for deprovisioning  1

for provisioning  1, 2

modifying  1

sample user members  1

separation of duty  1

Run AuditLog Report capability  1

Run capabilities

Run Admin Report  1

Run Audit Report  1

Run Reconcile Report  1

Run Resource Report  1

Run Risk Analysis  1

Run Role Report  1

Run Task Report  1

Run User Report  1

running tasks in background  1

S

sample user members rule  1

schema map  1

scoping controlled organizations  1

searching

service provider transactions  1

user accounts  1

security

best practices  1

features  1

pass-through authentication  1

password management  1

user account  1

Security Administrator capability  1

Security Management event group  1

self-discovery  1

server encryption

keys  1

managing  1, 2

Service Provider

advanced transaction process settings  1

audit group configuration  1

callout configuration  1

configuring search defaults  1

configuring synchronization  1

creating admin roles  1

creating user accounts  1

delegated administration  1

deleting user accounts  1

enabling admin role delegation  1

initial configuration  1

monitoring transactions  1

searching user accounts  1

setting transaction defaults  1

tracked event configuration  1

transaction database configuration  1

Transaction Persistent Store  1

Service Provider end-user interface  1

Service Provider user administration  1

Service Provider User type  1

session auditing  1

session limits, setting  1

signed approvals, configuring  1

Solaris

patches  1

support  1

specifying

attributes from account data  1

notification recipients  1, 2, 3, 4

user notifications  1

SSL

configuring PasswordSync with  1

SSL connection, testing  1

status indicators, user accounts  1

Sunrise and Sunset tab

configuring  1, 2

description  1

sunrises

configuring  1

provisioning a new user  1

sunsets

configuring  1

deprovisioning  1

support

Solaris  1

suspending tasks  1

Sybase audit schema  1

synchronization

configuring  1

disabling  1

Service Provider feature  1

Synchronization Policy  1

Synchronize User Password workflow  1

syslog command  1

system configuration object

editing  1

system log

Data Exporter  1

defining a report  1

syslog lh command  1

trimming  1

viewing records from a command-line  1

System Settings page  1

T

tabs

Approvals  1

Configure Tasks  1

Data Transformations  1

General  1

Notification  1

Provisioning  1

Sunrise and Sunset  1

tampering, prevention  1

Task Management event group  1

task names

attribute references  1

defining  1, 2

Task Report Administrator capability  1

task templates

configuring  1

Create User Template  1

Delete User Template  1

editing  1

enabling  1, 2

mapping process types  1

Update User Template  1

task-based capabilities  1

tasks

Data Exporter  1

identity auditing  1

retrying  1

running in background  1

sunrises/sunsets  1

suspending  1

templates, email  1, 2, 3

Timeout Action button  1

timeout value, setting  1

timeouts

configuring  1, 2, 3

escalated approvals  1, 2, 3, 4, 5, 6

triple-DES encryption  1, 2

troubleshooting

audit policies  1

troubleshooting pages  1

types, extended  1

U

Unassign command  1

Unassign User capability  1

unassigning resource accounts  1, 2

uninstalling PasswordSync  1

uninstalling previous versions of PasswordSync  1

Unlink command  1

Unlink User capability  1

unlinking resource accounts  1

Unlock User capability  1

unlocking user accounts  1

Update command  1

Update User capability  1

Update User Template

configuring  1

description  1

mapping processes  1

updateUser  1

updating user accounts  1

user access, defining  1

user account

assigned audit policies  1

attributes  1

authentication  1

bulk actions  1

data  1

data transformations  1

deleting  1, 2

deprovisioning  1, 2, 3

enabling  1

finding  1

identity  1

moving  1

overview  1

passwords

resetting  1

renaming  1

searching  1

security  1

self-discovery  1

status indicators  1

unlocking  1

updating  1

viewing  1

User Account Administrator capability  1

User Admin Role  1

user entitlement record  1

user form  1

assigning to admin role  1

User Interface, Identity Manager  1

User Member Rule option box  1

User Report Administrator capability  1

user templates

editing  1, 2

selecting  1

user types  1

user.global.email attribute  1

user.waveset.accountId attribute  1

user.waveset.organization attribute  1

user.waveset.resources attribute  1

user.waveset.roles attribute  1

V

verifying process mappings  1

view handler auditing  1

View User capability  1

viewing

pending attestations  1

pending work items  1

report types  1

user accounts  1

work item history  1

virtual organizations

deleting  1

overview  1

refreshing  1

W

warehouse configuration  1

Waveset Administrator capability  1

waveset.accountId attribute  1

waveset.log table  1

waveset.logattr table  1

Windows Active Directory resource  1

work items

delegating  1

managing  1

pending  1

types  1

viewing history  1

workflow auditing  1, 2, 3

workflows, modifying  1

WSUser object  1

X

X509 certificate-based authentication  1

XML files

approval form  1, 2

extracting to  1

loading  1

Part No: 820-2954-10.   Copyright 2008 Sun Microsystems, Inc. All rights reserved.