Previous      Contents      Next
Sun Java System Identity Manager 2005Q4M3 Administration

2

Getting Started with Identity Manager

Read this chapter to learn about the Identity Manager graphical interfaces and how you can quickly begin using Identity Manager. Topics covered here include:

Identity Manager interfaces
Help and Guidance
Tasks you can perform and where to begin

---

Identity Manager Interfaces

The Identity Manager system includes three primary graphical interfaces through which users perform tasks:

Administrator Interface
User Interface
Business Process Editor (BPE)

Identity Manager Administrator Interface

The Identity Manager Administrator Interface serves as the primary administrative view of the product. Through this interface, Identity Manager administrators manage users, set up and assign resources, and define rights and access levels in the Identity Manager system.

Interface organization is represented by:

Navigation bar tabs — Located at the top of each interface page, these tabs let you navigate major functional areas.
Subtabs or menus — Depending on your specific implementation, you may see secondary tabs or menus below each navigation bar tab. These subtab or menu selections let you access tasks within a functional area.

In some areas, such as Accounts, tabbed forms divide longer forms into one or more pages, enabling you to navigate them more easily.

Figure 1. Identity Manager Administrator Interface

Identity Manager User Interface

The Identity Manager User Interface presents a limited view of the Identity Manager system. This view is specifically tailored to users without administrative capabilities.

From the User Interface, users can:

Change their passwords
Perform self-provisioning tasks
Manage profile information associated with their accounts

This interface is often customized to present a unique, company-specific view and offer custom selections.

---

Tip  For detailed information about customizing and branding the User Interface, read Identity Manager Technical Deployment Overview.

---

Figure 2. Identity Manager User Interface

Identity Manager Business Process Editor

The Business Process Editor (BPE), also referred to as the Configuration Editor, provides a graphical view of Identity Manager forms, rules, and workflows. Using the BPE, you create and edit forms that establish the features available on each Identity Manager page. You also modify Identity Manager workflows, which define the sequence of actions followed or tasks performed when working with Identity Manager user accounts.

Figure 3. Business Process Editor (Configuration Editor)

For more information about the BPE and using it to work with Identity Manager workflows, see Identity Manager Workflows, Forms, and Views.

---

Help and Guidance

To successfully complete some tasks, you may need to consult Help and Identity Manager guidance (field-level information and instructions). Help and guidance are available from the Identity Manager Administrator and User interfaces.

Identity Manager Help

For task-related help and information, click the Help button, which is located at the top of each Administrator and User Interface page.

Figure 4. Help

At the bottom of each Help window is a Contents link that guides you to other Help topics and the Identity Manager terms glossary.

Finding Information

Use the search feature in the Help window to locate topics and information included in Identity Manager Help and documentation. To search:

Enter one or more terms in the search area.
Select to search one of two documentation types. By default, the feature searches online help.
Online Help — In general, online information provides steps to help you perform a task or complete a form.
Documentation (Guides) — Identity Manager Guides primarily offer information to help you understand concepts and system objects, as well as complete reference information.
Click Search.

The search returns linked search results. Use the Previous/Next or First/Last buttons to page through the listed results.

Figure 5. Search Results Navigation

Clicking Reset clears the contents of the Help window.

Search Behavior

If you search for more than one word, the search feature returns results that include each word, both words, and variants.

For example, if you enter to search for:

resource adapter

then the returned results will include matches to the words:

resource (and variants)
adapter (and variants)
resource and adapter (in any order), with 0 to n intervening words

However, if you include search terms in quotations (for example, “resource adapter”), then the search feature returns only exact matches to that phrase.

Alternatively, you can use advanced query syntax to specifically include, exclude, or order query elements.

Advanced Query Syntax

The Search feature supports advanced query syntax, including:

Wildcard characters (? and *), which allow you to specify spelling patterns rather than complete words or phrases
Query operators (AND or OR), which let you determine how to combine query elements

See Advanced Search for Online Documentation in this guide for more information about Identity Manager’s advanced documentation search features.

Figure 6. Identity Manager Help

Identity Manager Guidance

Identity Manager guidance is brief, targeted help that appears next to many page fields. Its goal is to help you enter information or make selections as you move through a page to perform a task.

This symbol displays next to fields with guidance: . Click the symbol to open a window and display its associated information.

Figure 7. Identity Manager Guidance

Identity Manager Tasks

The following tasks matrix provides a quick reference to commonly performed Identity Manager tasks. It shows the primary Identity Manager interface location where you will go to begin each task, as well as alternate locations or methods (if available) that you can use to perform the same task.

Managing Identity Manager Users
To do this:	Go to:	Or:
Create and edit users	Accounts tab, List Accounts selection	Accounts tab, Find Users selection (User Account Search Results page)
Approve user account creation	Approvals tab
Set up user authentication (policies)	Configure tab, Policies selection
Change user passwords	Passwords tab, Change User Password selection	Accounts tab, List Accounts selection   Accounts tab, Find Users selection (User Account Search Results page)   Identity Manager User Interface
Reset user passwords	Passwords tab, Reset User Password selection	Accounts tab, List Accounts selection   Accounts tab, Find Users selection (User Account Search Results page)
Find users	Accounts tab, Find Users selection	Passwords tab, Change User Password selection
Enable or disable users	Accounts tab, List Accounts selection	Accounts tab, Find Users selection (User Account Search Results page)
Unlock users	Accounts tab, List Accounts selection	Accounts tab, Find Users selection (User Account Search Results page)
Managing Identity Manager Administrators
To do this:	Go to:
Set up delegated administration (through organizations)	Accounts tab, List Accounts selection, Create User page
Assign capabilities	Accounts tab, List Accounts selection, Create User page
Assign capabilities (through admin roles)	Accounts tab, List Accounts selection, Create User page
Set up approvers (to validate account creation)	Accounts tab, List Accounts selection, Create Organization page   Roles tab, Create Roles page
Configuring Identity Manager
To do this:	Go to:
Create and manage resources (Resource Wizard)	Resources tab
Manage resource groups	Resource tab, List Resource Groups selection
Create and manage roles	Roles tab
Find roles	Roles tab, Find Roles selection
Edit capabilities	Configure tab, Capabilities selection
Create and edit admin roles	Configure tab, Admin Roles selection, Create/Edit Admin Role page
Set up email templates	Configure tab, Email Templates selection
Set up password, account, and naming policies; assign policies to organizations	Configure tab, Policies selection
Configure Identity Attributes	Configure tab, Identity Attributes selection
Configure ChangeLogs	Configure tab, ChangeLogs selection
Loading and Synchronizing Accounts and Data
To do this:	Go to:
Import data files (such as XML-format forms)	Configure tab, Import Exchange File selection
Load resource accounts	Account tab, Load from Resource selection
Load accounts from file	Account tab, Load from File selection
Compare Identity Manager users with resource accounts	Resources tab, Reconcile with Resources selection
Auditing, Risk Analysis, and Reporting
To do this:	Go to:	To do this:
Set up audit events to capture	Configure tab, Audit Events selection	Set up audit events to capture
Run and manage reports	Reports tab	Run and manage reports
Define and run risk analysis reports	Risk Analysis tab	Define and run risk analysis reports

Table 1. Identity Manager Interface Task Reference

---

Where to Go from Here

After you become familiar with Identity Manager interfaces and ways you can find information, you may want to focus on one of the following topics. They are presented by chapter in this guide:

Chapter 3. User and Account Management
Chapter 4. Administration
Chapter 5. Configuration
Chapter 6. Data Synchronization and Loading
Chapter 7. Security
Chapter 8. Reporting
Chapter 9. Task Templates
Chapter 10. PasswordSync

Previous      Contents      Next

---

Copyright 2006 Sun Microsystems, Inc. All rights reserved.