Oracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive Provisioning and Reconciliation
|
|
- Evelyn Welch
- 6 years ago
- Views:
Transcription
1 Oracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive Provisioning and Reconciliation Principal Product Manager, Oracle Identity Governance
2 Provisioning Oracle Confidential Do 2 Not Distribute 2
3 Agenda - Provisioning Entities Lifecycle Application Instance Entitlement Roles Connected Resources vs. Disconnected Resource Access Policy Access Policy Harvesting Sunrise / Sunset of Accounts Oracle Confidential Do 3 Not Distribute 3
4 Concepts Catalog Collection of all request-able entities, namely, Roles, Application Instances and Entitlements. Application Instance An entity representing an actual target server instance. Abstraction of ITResource and Resource. Dependent App Instance Still based on Resource Object. Entitlement First class entity representing privilege in target system. Admin Roles OOTB roles having permissions for specific operations on entities. Viewer User who has this role,when requests entity goes through via request & approval Administrator To manage (CRUD) entity via sys admin console. Authorizer direct operation without request & approval. Disconnected Application Instance/ Entitlements Any system for which OOTB connector not available e.g Laptop, Cellphone, Badge, Any custom application. And yes, no Design console needed for Disconnected Application Instance & Entitlements. 4
5 Concepts Publishing App Instance/Entitlement to Org Account type To make them available for requester. primary The very first Provisioned Account. Entitlements are initially associated to primary account. other All other accounts other than primary and service account. service Account that is marked as a service account. Service account can not be a primary account. Process form-field properties ITResource = true (process form with multiple ITResourceLookup fields) Entitlement = true (on child form to mark field as entitlement) AccountName = true (the unique attribute on process form that can be tagged as account name) AccountDiscriminator = true (column uniquely identifying resource instance across multiple ones provisioned for the same resource) Form UI construct necessary to provide request data. Sandbox Defines logical start & end point for UI customization. 5
6 High level flow - How it all fits together? 6
7 On-boarding Application Instance Connected Application Instance Install connector Tag properties ITResource=true, AccountName = true, Tag Entitlement = true in child process form. Create Sandbox. Create Application Instance Create Form and associate to Application Instance Onboard Entitlements Run Lookup recon scheduled job Run Entitlement Synch scheduled job/ Run Catalog Synchronization job (Automatic) Publish Application Instance (and its entitlements) to Organization 7
8 On-boarding Application Instance Disconnected Application Instance Create Sandbox. Create Application Instance (check disconnected) Create Form/Child Forms and associate to Application Instance OIM artifacts created behind the scene. Publish Application Instance to Organization Use Entitlement Loader schedule task in Flat File connector to load lookups/entitlements Run Catalog Synchronization job. Customize request form for more UI cosmetic changes or add new attributes Enrich the catalog entry for disconnected app instance or entitlements to assign fulfillment responsibility Enhance the fulfillment composite To model task assignment rules based on application metadata and compliance objectives. To connect to Third Party ticket management systems (BMC Remedy TM, CA Service center etc.) 8
9 On-boarding Entitlements Connected Entitlements Import connector. Tag Entitlement = true in child process form. Run Lookup Reconciliation Job Run Entitlement List Job Run Catalog Synchronization Job. Publish all Entitlements to Organization Disconnected Entitlements Create Child form using UI Add field of type Lookup Populate lookup manually or by using flat file based lookup recon (covered in Lab 16) Run Entitlement List Job Run Catalog Synchronization Job. 9
10 Adding Entitlement via UI 10
11 Catalog Based request 11
12 Entitlement Provisioning 12 12
13 Manual Provisioning Task 13
14 Manual Provisioning Task Configuration 14
15 Application Instance Life Cycle 15
16 Entitlement Life Cycle 16 16
17 Schedule Jobs Lookup Reconciliation Task - Populates Lookup Target System LKU/LKV ENT_LIST (if marked Entitlement=true) Entitlement List Populates Entitlements. LKV ENT_LIST CATALOG Catalog Synchronization Job Populates catalog. ENT_LIST CATALOG APP_INSTANCE CATALOG Entitlement Assignments Populates Provisioned Entitlements. UD_CHILD ENT_ASSIGN (for upgrade) Entitlement Post Delete Processing Job Entitlement life cycle (on deletion impact on catalog, provisioned entitlements) Application Instance Post Delete Processing Job App Instance life cycle (on deletion impact on catalog, provisioned accounts) Update Accounts With App Instance Job Create App instance based on ITResource + Resource Object Update accounts that do not have app instance associated to them. 17
18 Impact on OIM Features Deployment Manager Changes to export application instance Connectors (No Mandatory impact, choice to leverage the properties optionally) New properties AccountDiscriminator=true, AccountName=true, ITResource=true, Entitlement=true The Entitlement values populated in the lookup tables are of the format ITRESKEY~ENTCODE OIM-OIA integration - No functional changes SOD Integration - No functional changes Reports - No functional changes Audit - No functional change in Audit engine. Bulk load - No functional changes. 18
19 Special Request Status related to Fulfillment (Provisioning) Post Operation Processing Initiated After operation level approval is done. (This is R2 status) Approval Complete Fulfillment Pending In case of disconnected app instance/entitlement, after approval completed, h/w, manual provisioning task is yet to be completed. (This is post R2 status) Approval Complete Fulfillment Rejected After operation level approval done, manual provisioning task is Rejected. Request Fulfillment Failed When provisioning fails. Request Fulfillment Failed After Max Retry When provisioning fails after Rejected provisioning task is retried max. # of times. 19
20 Access Policy: RNLA/DNLA Accounts provisioned via AP will either be Revoked or Disabled if policy ceases to apply. i.e They will no longer be in provisioned state in any case. Flags in AP definition RNLA Revoke if No Longer Applies. (marks OIU_REVOKE = 1) DNLA Disable if No Longer Applies. (marks OIU_REVOKE = 2) If more than one policies applies, one with Revoke and other with Disable, then Disable takes precedence. i.e (OIU_REVOKE = 2) Entitlements (child data) are always revoked (for both Disable/Revoke case). If policy applies again, accounts in Disabled state are Enabled rather than Provisioning new account. If AP is with Approval, Request is only created for Access Policy Based Provision (and not for Disable, Enable, Revoke action. ) Anything that is not RNLA, will become DNLA as a part of upgrade
21 Access Policy Evaluation Only Via Schedule Task 21 21
22 Pre-Upgrade guidelines for Provisioning AccountName=true Account login on the parent form. Every RO should have ITResource (except GTC). ITResource=true (for RO with multi ITRes on process). Entitlements in lookup (LKV) must have ITRes key prefixed to the encoded values using ~ (tilda). Ex - 14~CN=AITTAA0,DC=abc,DC=com. Entitlement=true Entitlement fields in the child tables Entitlement=true should be same as the key attribute for the child data in reconciliation field mapping. AP must have ITRes field populated with default value. AP with RNLA unchecked = DNLA in R
23 Access Policy Harvesting Oracle Confidential Do 23 Not Distribute 23
24 Background and Requirement Usecase Reconciled / bulk loaded user accounts are not managed by access policy even if access policy is applicable to user once role is assigned to user via membership rule or direct assignment. Current Workaround Run ad-hoc query to associate access policy to account. This is manual error prone process and is not validated by access policy engine. Strategic Solution Enhance access policy engine to link access policy to reconciled and bulk loaded accounts after policy evaluation by access policy engine. Oracle Confidential Do 24 Not Distribute 24
25 Mandatory points for Access Policy Harvesting XL.AllowAPHarvesting = true Policy to be linked should be marked retrofit 'XL.AllowAPBasedMultipleAccountProvisioning = true A field on process form should be marked with property Account Discriminator = true Access Policy defaults for account discriminator field should be populated. Note: Only Reconciled and bulk loaded accounts are linked with access policy as per policy evaluation engine. i.e Direct / Request Based provisioned accounts are not considered for AP Harvesting. 25
26 How customer will uptake this feature? Use case1: Set points for AP Harvesting. Users are reconciled / bulk loaded Role are reconciled / bulk loaded Role memberships are reconciled / bulk loaded Accounts are reconciled / bulk loaded (only after user are loaded) Access Policies are configured / imported. At this point, users are marked for AP evaluation Evaluate Policy ST runs Policies are linked to accounts. Verify child data is linked to policy based on child data matching. 26
27 Test cases Use case 2 Create multiple access policies with the same object so that multiple access policies are applicable to reconciled/ bulk loaded accounts. Verify AP with highest priority is linked to account. Use case3 After policy is linked to account after AP Harvesting, make AP cease to apply (by removing role from user or by removing role for AP association). Note, resource is revoked / disabled based on Revoke/Disable if No Longer applied (RNLA/DNLA) flag. 27
28 Test cases Use case 4 Set mandatory points for Access Policy Harvesting as false (one at a time) Verify harvesting is not succeeded for both account & parent/child data. Use case 5 Verify Direct / Request Based provisioned accounts are not considered for AP Harvesting 28
29 Sunrise / Sunset of Accounts and Entitlements Oracle Confidential Do 29 Not Distribute 29
30 Overview Sunrise of accounts Accounts can be provisioned with a future start date i.e. future sunrise date. Accounts with future start date will be Provisioned to target but Disabled until start date is reached. Entitlements can be granted to such accounts. Once start date is reached, accounts will be Enabled. Sunset of accounts Accounts can be provisioned with an end date i.e. sunset date. Once account end date is reached, account will be Disabled or Revoked based on the system configuration. 30
31 Overview Sunrise of entitlements Entitlements can be provisioned with a future start date i.e. future sunrise date. Entitlements with future start date will be saved in OIM with a special status Future_Grant and NOT propagated to the target. Once start date is reached, entitlement will be propagated to target. Sunset of entitlements Entitlements can be provisioned with an end date i.e. sunset date. Once end date is reached, entitlement will be Revoked. Note: For connectors such as EBS that support passing entitlement valid_from, valid_to fields as part of the entitlement data, current functionality will still be supported. 31
32 Overview Provisioning of accounts/entitlements to a disabled user Accounts can be provisioned to user with a future start date. These accounts will be Disabled Entitlements can also be granted to such disabled users. 32
33 Overview Scope of this project: Provisioning APIs enhanced to handle sunrise/sunset of accounts and entitlements. Schedule tasks added : Sunrise of Accounts and Entitlements Sunset of Accounts and Entitlements Current assumption is schedule tasks will be run once DAILY. There are 2 schedule tasks so customer can control the frequency of sunrise/sunset independently. Direct and request-based provisioning of accounts/entitlements supported. No UI support 33
34 Dynamic Organization Membership Oracle Confidential Do 34 Not Distribute 34
35 Existing OIM R2PS1 Functionality OIM R2PS1 allows user to be associated with one static organization called the home-org of the user. End user by default will only be able to access the resources available in the home-org. To access the resources in other organizations user has to have some kind of Admin Role memberships in other organizations. 35
36 Dynamic Organization Membership Dynamic Organization (membership) establishes the dynamic membership of User with a given organization. The rule to establish dynamic membership is created per organization. One Org-User membership rule per organization. Dynamic Organization results in a given user being part of multiple organization and request resources available in these organizations. The dynamic memberships can be revoked by changing the membership rule or the User attribute. 36
37 What s New? The dynamic org membership introduced following new functionalities in OIM: Ability to define/create Org-User Membership rule. Ability to preview the org-membership changes before applying the changes Offline evaluation (scheduled job) & Inline evaluation of the membership rule. Users getting assigned to new organizations as soon as they are created or their attributes modified. Requesting for resources in dynamic-organizations through catalog. Getting extended User memberships via SPML and Req-WS. 37
38 Create membership rule The org-user membership rule can be created from the Organization -> Members tab: The Add rule button allows to create the dynamic organization membership rule for the organization. The Add Rule will open the Rule Editor window. 38
39 Create membership rule (contd..) The Rule Editor window allows to create the membership rule on the user attributes : Multiple logical expression can be added to a rule condition. Clicking on Preview Results tab allows to preview the result before saving. 39
40 Preview memberships The Preview Results tab on the Rule Editor allows to preview the results of rule before saving the rule. Once satisfied with results, clicking on Save will set the rule information. 40
41 Offline vs Inline evaluation On the Organization -> Members tab, the memberships can be evaluated in either offline ( Apply ) OR inline ( Apply & Evaluate ) mode. In the inline mode the dynamic org-user memberships will be evaluated immediately in the post-processing stage. In the offline mode the dynamic memberships will be evaluated by a scheduled job Refresh Organization Memberships. The job runs every hour by default. 41
42 Refresh Organization Memberships Scheduled job The scheduled job Refresh Organization Memberships is accessible from the Scheduler link in the sysadmin console. 42
43 Membership evaluation during User Create/Modify/Delete The User create/modify/delete triggers the inline post-processing of the dynamic org membership evaluation. The Organizations tab in the User details screen will show both static(home) org as well as dynamic-org of the User. 43
44 Requesting Resources The catalog able resources in the dynamic organization can be requested from the catalog screen: In this case, Samantha (an end user) is requesting a role(uscontractor) that is only available in Samantha s dynamic organization (US_Contractors) 44
45 Getting User memberships via SPML and Request-WS 45
46 Reconciliation Oracle Confidential Do 46 Not Distribute 46
47 Key Concepts - Reconciliation Reconciliation is the process by which operations, such as user creation, modification, or deletion, started on the target system are communicated to Oracle Identity Manager. The reconciliation process compares the entries in Oracle Identity Manager repository and the target system repository, determines the difference between the two repositories, and applies the latest changes to Oracle Identity Manager repository. The following entities are reconciled: User Account Organization Role Role hierarchy Role membership 47
48 Key Concepts - Reconciliation Mode Regular Reconciliation event would contain ALL data and will be handled without additional processing. Performance benefits Changelog Reconciliation event should contain only that data that got changed and will be handled with required processing. Mode can be configured in the Recon profile or as a flag with Reconciliation event creation API. Approach (connector implementation) Full Incremental Additional scenarios Status Authoritative Account Future dated 48
49 Key Concepts Types of Reconciliation Trusted Source Reconciliation Target Resource Reconciliation 49
50 Trusted Source Reconciliation If data is reconciled from a system that drives the creation of users, roles, role memberships, or role hierarchies in Oracle Identity Manager repository, then that reconciliation mode is called identity reconciliation, or authoritative source reconciliation, or trusted source reconciliation. The system that is being reconciled from is referred to as the authoritative source for the enterprise identities, and may be an HR system or a corporate directory. 50
51 Trusted Source Reconciliation 51
52 Target Resource Reconciliation If the target system identities are accounts that get reconciled to Oracle Identity Manager, then that is target resource reconciliation or account reconciliation. This type of reconciliation is to reconcile a specific resource object that represents the target system being managed. There is always a corresponding provisioning flow for it. The identity retrieved from the target system maps to a resource object instance that has been provisioned to a user or organization. 52
53 Target Resource Reconciliation 53
54 Reconciliation Process Flow 54
55 Oracle Proprietary and Confidential 2011 Oracle Internal Use Only Page 55
56 56
OIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 2 - Install and Configure Connector Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you
More informationOracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive Upgrade
Oracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive Upgrade atul.goyal@oracle.com Principal Product Manager, Oracle Identity Governance This document is for informational
More information1Z Oracle Identity Governance Suite 11g PS3 Implementation Essentials Exam Summary Syllabus Questions
1Z0-339 Oracle Identity Governance Suite 11g PS3 Implementation Essentials Exam Summary Syllabus Questions Table of Contents Introduction to 1Z0-339 Exam on Oracle Identity Governance Suite 11g PS3 Implementation
More informationOracle Identity Manager 11gR2-PS2 Hands-on Workshop
Oracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive Catalog, Access Request and Approval Workflow atul.goyal@oracle.com Principal Product Manager, Oracle Identity Governance Agenda Catalog
More informationOIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 4 - Configure Request Scenarios Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are
More informationOracle 1Z Oracle Identity Governance Suite 11g PS3 Implementation Essentials.
Oracle 1Z0-339 Oracle Identity Governance Suite 11g PS3 Implementation Essentials http://killexams.com/exam-detail/1z0-339 QUESTION: 72 Which two parameters from the User profile audit data collection
More informationOracle Identity Governance 11g R2: Develop Identity Provisioning
Oracle University Contact Us: Local: 0845 777 7 711 Intl: +44 845 777 7 711 Oracle Identity Governance 11g R2: Develop Identity Provisioning Duration: 5 Days What you will learn In this intensive course,
More informationOracle Identity Governance 11g R2 PS2
Oracle Identity Governance 11g R2 PS2 IQ online training facility offers Oracle Identity Governance 11g R2 PS2 online training by trainers who have expert knowledge in the Oracle Identity Governance 11g
More informationQuestion: 1 Which item must be enabled on the client side to allow users to complete certification in offline mode?
Volume: 81 Questions Question: 1 Which item must be enabled on the client side to allow users to complete certification in offline mode? A. In Microsoft Excel, navigate to Excel Options >Trust Center tab
More informationOracle Identity Governance 11g R2: Develop Identity Provisioning
Oracle University Contact Us: 20 (0)2 35350254 Oracle Identity Governance 11g R2: Develop Identity Provisioning Duration: 5 Days What you will learn In this intensive course, you'll learn about Oracle
More informationOracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive DB Schema, Backup & Restore, Bulkload, Reports, Archival & Purge
Oracle Identity Manager 11gR2-PS2 Hands-on Workshop Tech Deep Dive DB Schema, Backup & Restore, Bulkload, Reports, Archival & Purge atul.goyal@oracle.com Principal Product Manager,
More informationCA GovernanceMinder. CA IdentityMinder Integration Guide
CA GovernanceMinder CA IdentityMinder Integration Guide 12.6.00 This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation
More informationOracle Identity Manager 11g R2: Essentials
Oracle University Contact Us: 0800 891 6502 Oracle Identity Manager 11g R2: Essentials Duration: 5 Days What you will learn This course teaches you how to implement identity management solutions with Oracle
More informationOracle Identity Manager
Oracle Identity Manager Connector Concepts Release 9.1.0 E11217-02 July 2009 Oracle Identity Manager Connector Concepts, Release 9.1.0 E11217-02 Copyright 2009, Oracle and/or its affiliates. All rights
More informationIBM Security Identity Manager Version Administration Topics
IBM Security Identity Manager Version 6.0.0.5 Administration Topics IBM Security Identity Manager Version 6.0.0.5 Administration Topics ii IBM Security Identity Manager Version 6.0.0.5: Administration
More informationLab 13: Configure Advanced Provisioning Infrastructure for Request based scenarios
Lab 13: Configure Advanced Provisioning Infrastructure for Request based scenarios Contents Lab 13: Configure Advanced Provisioning Infrastructure for Request based scenarios... 1 1. Introduction... 1
More informationOIG 11G R2 PS2 Field Enablement Training. Table of Contents
OIG 11G R2 PS2 Field Enablement Training Lab 22 - Changes in OIM triggered to downstream app Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please
More informationOIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 4.1 PS2 Request Enhancements Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible
More informationOracle Policy Automation The modern enterprise advice platform
Oracle Policy Automation The modern enterprise advice platform Release features and benefits (November 2017) v1.01 Program agenda 1 2 3 Overview of Oracle Policy Automation New features in release For
More informationLab 3: Configuration of OIM to manage user accounts lifecycle in DSEE application
OIM 11g Workshop Lab 3 Lab 3: Configuration of OIM to manage user accounts lifecycle in DSEE application Contents Lab 3: Configuration of OIM to manage user accounts lifecycle in DSEE application... 1
More informationOIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 14 - Reconciliation Lab Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible
More informationActual4Test. Actual4test - actual test exam dumps-pass for IT exams
Actual4Test http://www.actual4test.com Actual4test - actual test exam dumps-pass for IT exams Exam : 1z0-459 Title : Oracle Identity Governance Suite 11g Essentials Vendor : Oracle Version : DEMO Get Latest
More informationConnector Guide for Oracle Internet Directory Release
[1]Oracle Identity Manager Connector Guide for Oracle Internet Directory Release 11.1.1 E28603-18 December 2017 Oracle Identity Manager Connector Guide for Oracle Internet Directory, Release 11.1.1 E28603-18
More informationUpgrading to Oracle Identity Governace
Upgrading to Oracle Identity Governace 12.2.1.3.0 Technical Overview O R A C L E W H I T E P A P E R A U G U S T 2 0 1 7 Table of Contents Executive Overview 1 Benefits of Upgrading to OIG 12cPS3 2 Upgrading
More informationOracle Banking Platform Collections
Oracle Banking Platform Collections User Provisioning Guide Release 2.6.0.2.0 E91250-01 October 2017 Oracle Banking Platform Collections User Provisioning Guide, Release 2.6.0.2.0 E91250-01 Copyright 2011,
More informationOracle Identity Manager
Oracle Identity Manager Connector Guide for SAP User Management Release 9.1.2 E11212-16 July 2014 Oracle Identity Manager Connector Guide for SAP User Management, Release 9.1.2 E11212-16 Copyright 2013,
More informationConnector Guide for Microsoft Active Directory User Management Release 9.1.1
[1]Oracle Identity Manager Connector Guide for Microsoft Active Directory User Management Release 9.1.1 E11197-18 March 2018 Oracle Identity Manager Connector Guide for Microsoft Active Directory User
More informationOracle HCM Cloud Common Release 12. What s New
Oracle HCM Cloud Common Release 12 What s New TABLE OF CONTENTS REVISION HISTORY... 4 OVERVIEW... 7 RELEASE FEATURE SUMMARY... 8 HCM COMMON FEATURES... 11 APPLICATIONS SECURITY... 11 User Account Management...
More informationConnector Guide for PeopleSoft Employee Reconciliation Release
[1]Oracle Identity Manager Connector Guide for PeopleSoft Employee Reconciliation Release 11.1.1 E25370-19 September 2018 Oracle Identity Manager Connector Guide for PeopleSoft Employee Reconciliation,
More informationMaintaining Configuration Settings in Access Control
Maintaining Configuration Settings in Access Control Applies to: SAP BusinessObjects Access Control 10.0 SP05 Summary: This guide contains additional information about the parameters used when configuring
More informationConnector Guide for Database Application Tables Release
[1]Oracle Identity Manager Connector Guide for Database Application Tables Release 11.1.1 E20277-10 December 2017 Oracle Identity Manager Connector Guide for Database Application Tables, Release 11.1.1
More informationOracle Identity Manager 11g: Essentials
Oracle Identity Manager 11g: Essentials Volume I Student Guide D65160GC10 Edition 1.0 November 2010 D69802 Disclaimer This document contains proprietary information and is protected by copyright and other
More informationDYNAMICS 365 BUSINESS PROCESS VISUALIZATION USING VISIO
MICROSOFT LABS JANUARY 10, 2019 DYNAMICS 365 BUSINESS PROCESS VISUALIZATION USING VISIO A Solution to create a Microsoft VISIO template by consuming the configured entity values from the CRM entity record.
More informationLab 19: Event Handlers for User Entities
Lab 19: Event Handlers for User Entities Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible for deleting them from
More informationCA IdentityMinder. Glossary
CA IdentityMinder Glossary 12.6.3 This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is for your informational
More informationAxon Fixed Limitations... 1 Known Limitations... 3 Informatica Global Customer Support... 5
Axon Data Governance 5.4 Release Notes September 2018 Copyright Informatica LLC 2015, 2018 Contents Axon 5.4... 1 Fixed Limitations.... 1 Known Limitations.... 3 Informatica Global Customer Support...
More informationOpenIAM Identity and Access Manager Technical Architecture Overview
OpenIAM Identity and Access Manager Technical Architecture Overview Overview... 3 Architecture... 3 Common Use Case Description... 3 Identity and Access Middleware... 5 Enterprise Service Bus (ESB)...
More informationIBM Tivoli Identity Manager V5.1 Fundamentals
IBM Tivoli Identity Manager V5.1 Fundamentals Number: 000-038 Passing Score: 600 Time Limit: 120 min File Version: 1.0 http://www.gratisexam.com/ IBM 000-038 IBM Tivoli Identity Manager V5.1 Fundamentals
More informationIBM Security Identity Manager Version Planning Topics IBM
IBM Security Identity Manager Version 7.0.1 Planning Topics IBM IBM Security Identity Manager Version 7.0.1 Planning Topics IBM ii IBM Security Identity Manager Version 7.0.1: Planning Topics Table of
More information2012 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, Excel, Lync, Outlook, SharePoint, Silverlight, SQL Server, Windows,
2012 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, Excel, Lync, Outlook, SharePoint, Silverlight, SQL Server, Windows, Windows Server, and other product names are or may be registered
More informationCA Automation Capabilities A Technical Look at Process and Runbook Automation. Tom Kouhsari and AJ Dennis
CA Automation Capabilities A Technical Look at Process and Runbook Automation Tom Kouhsari and AJ Dennis Terms of This Presentation This presentation was based on current information and resource allocations
More informationConnector Guide for Microsoft Active Directory User Management Release
[1]Oracle Identity Manager Connector Guide for Microsoft Active Directory User Management Release 11.1.1 E20347-20 August 2017 Oracle Identity Manager Connector Guide for Microsoft Active Directory User
More informationHPE Enterprise Maps Security. HPE Software, Cloud and Automation
HPE Enterprise Maps HPE Software, Cloud and Automation Agenda Concepts and Access Control Domains, Roles, Groups, Users Authentication LDAP Integration SSO Integration HTTP Proxy and Access Control Organizations
More informationSharePoint Server 2016 Feature Comparison* Accessibility Standards Support Yes Yes. Asset Library Enhancements/Video Support Yes Yes.
Content Features SharePoint Server 2016 Feature Comparison* Accessibility Standards Support Yes Yes Asset Library Enhancements/Video Support Yes Yes Auditing Yes Yes Auditing & Reporting (e.g. doc edits,
More informationOracle Identity Manager: Administration and Implementation
Oracle University Contact Us: 1.800.529.0165 Oracle Identity Manager: Administration and Implementation Duration: 5 Days What you will learn The Oracle Identity Manager: Administration and Implementation
More informationConnector Guide for IBM Lotus Notes and Domino Release
[1]Oracle Identity Manager Connector Guide for IBM Lotus Notes and Domino Release 11.1.1 E20466-16 November 2017 Oracle Identity Manager Connector Guide for IBM Lotus Notes and Domino, Release 11.1.1 E20466-16
More informationwith Oracle IDM Peter Heintzen, Sen. Mgr. Information Security Oracle
Data Privacy Enhanced Database Security with Oracle IDM Peter Heintzen, Sen. Mgr. Information Security Oracle Security Levels for SLAs Preventive Controls Detective Controls Corrective
More informationSharepoint Introduction. Module-1: Working on Lists. Module-2: Predefined Lists and Libraries
Training & Consulting Sharepoint Introduction An overview of the SharePoint Admin Center 1 Comparing the different SharePoint Online versions Finding the SharePoint Admin Center in Office 365 A brief walkthrough
More informationUser Guide. Version R92. English
AuthAnvil User Guide Version R92 English October 9, 2015 Agreement The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya s Click-Accept EULATOS as updated from
More informationHPE Intelligent Management Center v7.3
HPE Intelligent Management Center v7.3 Service Operation Manager Administrator Guide Abstract This guide contains comprehensive conceptual information for network administrators and other personnel who
More informationCopyright 2013, Oracle and/or its affiliates. All rights reserved.
1 Securing Privileged Accounts with an Integrated IDM Solution Olaf.Stullich@oracle.com Product Manager, Oracle Mike Laramie Oracle Cloud for Industry Architecture Team Buddhika Kottahachchi OPAM Architect
More informationGrouper Working Group
Grouper Working Group Agenda Internet2 IPR, agenda bash" Grouper v2.0 in brief" Whoʼs using Grouper? Survey take aways" Focus on v2.x: current plans & discussion" Grouper & OSIdM4HE" Your items " 2" October
More information08/10/2018. Kingston Software Asset Management
08/10/2018 Contents Contents... 4... 4 Request...4 Set up... 5 Get started with...6 roles... 7 overview... 8 Software license management... 33 Software discovery and normalization...54 Software reconciliation
More informationBEAAquaLogic Enterprise Repository. Automation for Web Services Guide
BEAAquaLogic Enterprise Repository Automation for Web Services Guide Version 3.0. RP1 Revised: February, 2008 Table of Contents Overview System Settings Properties for Managing WSDL- and UDDI-Related
More informationReal Application Security Administration
Oracle Database Real Application Security Administration Console (RASADM) User s Guide 12c Release 2 (12.2) E85615-01 June 2017 Real Application Security Administration Oracle Database Real Application
More informationOracle Identity Manager Connector Guide for ServiceNow. Release
Oracle Identity Manager Connector Guide for ServiceNow Release 11.1.1 E73592-03 October 2018 Oracle Identity Manager Connector Guide for ServiceNow, Release 11.1.1 E73592-03 Copyright 2016, 2018, Oracle
More informationOIG 11G R2 PS1 Field Enablement Training
OIG 11G R2 PS1 Field Enablement Training Lab27_ Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible for deleting
More informationEnterprise Data Catalog for Microsoft Azure Tutorial
Enterprise Data Catalog for Microsoft Azure Tutorial VERSION 10.2 JANUARY 2018 Page 1 of 45 Contents Tutorial Objectives... 4 Enterprise Data Catalog Overview... 5 Overview... 5 Objectives... 5 Enterprise
More informationSetting Up Resources in VMware Identity Manager. VMware Identity Manager 2.8
Setting Up Resources in VMware Identity Manager VMware Identity Manager 2.8 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments
More informationAltiris CMDB Solution from Symantec Help. Version 7.0
Altiris CMDB Solution from Symantec Help Version 7.0 CMDB Solution Help topics This document includes the following topics: About CMDB Solution CMDB Global Settings page Default values page Default values
More informationBanner Student. Banner Student: Communication Plan, Population Selection and Letter Generation. Description
Banner Student Banner Student: Communication Plan, Population Selection and Letter Generation A communication plan is a method of organizing and automating the process of distributing materials to persons.
More informationTABLE OF CONTENTS DOCUMENT HISTORY
TABLE OF CONTENTS DOCUMENT HISTORY 6 MAY 2018 UPDATE 6 Revision History 6 Oracle Financial Consolidation and Close Cloud, May Update 6 Monthly Update Schedule 6 Please Join Oracle Cloud Customer Connect
More informationOracle Warehouse Builder 10g Release 2 Integrating Packaged Applications Data
Oracle Warehouse Builder 10g Release 2 Integrating Packaged Applications Data June 2006 Note: This document is for informational purposes. It is not a commitment to deliver any material, code, or functionality,
More informationOracle Identity Manager
Oracle Identity Manager Connector Guide for Sun Java System Directory Release 9.0.4 E10446-13 September 2013 Oracle Identity Manager Connector Guide for Sun Java System Directory, Release 9.0.4 E10446-13
More informationVeeva CRM Documentation. Copyright Veeva Systems Inc. All rights reserved. Veeva is a U.S. registered trademark of Veeva Systems.
April 2016 1 Veeva CRM Documentation Copyright 2013-2016 Veeva Systems Inc. All rights reserved. Veeva is a U.S. registered trademark of Veeva Systems. Additional company and product names may be trademarks
More informationPlanning and Administering SharePoint 2016
Planning and Administering SharePoint 2016 Course 20339A 5 Days Instructor-led, Hands on Course Information This five-day course will combine the Planning and Administering SharePoint 2016 class with the
More informationWhat is orbac? ability to group several authorizations in to profiles to easily add/remove a set of authorizations to an employee
What is orbac? orbac orbac (opns Role Based Access Control) is a IT security solution that enables a structured, centralized, hierarchical and delegated management of IT privileges. orbac is based on the
More informationAdmin Table is oftr Caoto ntr e s U ntsser Guide Table of Contents Introduction Accessing the Portal
Administrator s Table of Contents User Guide Table of Contents Introduction 3 Accessing the Portal 3 Create User Accounts 4 Enable / Disable User Accounts 5 Manage Users from an LDAP Server 5 User Roles
More informationOracle Identity Manager
Oracle Identity Manager Connector Guide for SAP User Management Engine Release 9.1.0 E17554-01 May 2010 Oracle Identity Manager Connector Guide for SAP User Management Engine, Release 9.1.0 E17554-01 Copyright
More informationOracle Identity Manager Connector Guide for Dropbox. Release
Oracle Identity Manager Connector Guide for Dropbox Release 11.1.1 E75724-02 April 2018 Oracle Identity Manager Connector Guide for Dropbox, Release 11.1.1 E75724-02 Copyright 2016, 2018, Oracle and/or
More informationThis document contains information on fixed and known limitations for Test Data Management.
Informatica Corporation Test Data Management Version 9.6.0 Release Notes August 2014 Copyright (c) 2003-2014 Informatica Corporation. All rights reserved. Contents Informatica Version 9.6.0... 1 Installation
More informationOracle. Engagement Cloud Implementing Service in Engagement Cloud. Release 13 (update 18B)
Oracle Engagement Cloud Implementing Service in Engagement Cloud Release 13 (update 18B) Release 13 (update 18B) Part Number E94456-04 Copyright 2011-2018, Oracle and/or its affiliates. All rights reserved.
More informationConnector Guide for Generic Scripting Release
[1]Oracle Identity Manager Connector Guide for Generic Scripting Release 11.1.1 E69380-01 June 2016 Oracle Identity Manager Connector Guide for Generic Scripting, Release 11.1.1 E69380-01 Copyright 2016,
More informationSAP SuccessFactors Q Review Platform By James Clough, Solution Architect, ROC
SAP SuccessFactors Q4 2017 Review Platform By James Clough, Solution Architect, ROC GDPR General Data Protection Regulation This reform of European Data Protection deadline is looming with less than 200
More informationXton Access Manager GETTING STARTED GUIDE
Xton Access Manager GETTING STARTED GUIDE XTON TECHNOLOGIES, LLC PHILADELPHIA Copyright 2017. Xton Technologies LLC. Contents Introduction... 2 Technical Support... 2 What is Xton Access Manager?... 3
More informationSHAREPOINT-2016 Syllabus
Syllabus Overview: Gone are those days when we used to manage all information in a corporate manually. For every type of requirement we have different solutions but integrating them is a big nuisance.
More informationUser Guide. Version R94. English
AuthAnvil User Guide Version R94 English March 8, 2017 Copyright Agreement The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya s Click-Accept EULATOS as updated
More informationTestkings.C_GRCAC_10.91 questions
Testkings.C_GRCAC_10.91 questions Number: C_GRCAC_10 Passing Score: 800 Time Limit: 120 min File Version: 4.5 http://www.gratisexam.com/ SAP C_GRCAC_10 SAP Certified Application Associate - SAP BusinessObjects
More informationIBM Security Identity Manager Version Glossary IBM
IBM Security Identity Manager Version 7.0.1.3 Glossary IBM IBM Security Identity Manager Version 7.0.1.3 Glossary IBM ii IBM Security Identity Manager Version 7.0.1.3: Glossary Table of contents Glossary..............
More informationProduct Release Notes Alderstone cmt 2.0
Alderstone cmt product release notes Product Release Notes Alderstone cmt 2.0 Alderstone Consulting is a technology company headquartered in the UK and established in 2008. A BMC Technology Alliance Premier
More informationAvePoint Governance Automation 2. Release Notes
AvePoint Governance Automation 2 Release Notes Service Pack 2, Cumulative Update 1 Release Date: June 2018 New Features and Improvements In the Create Office 365 Group/Team service > Governance Automation
More informationServiceNow Deployment Guide
ServiceNow Deployment Guide (For Eureka release and forward) Okta Inc. 301 Brannan Street, 3 rd Floor San Francisco, CA, 94107 info@okta.com 1-888-722-7871 Contents Overview... 3 Active Directory Integration...
More informationTABLE OF CONTENTS DOCUMENT HISTORY
TABLE OF CONTENTS DOCUMENT HISTORY 3 FEBRUARY MAINTENANCE PACK FOR 17D 3 Revision History 3 Overview 3 Feature Summary 4 HCM Data Loader 4 User Deletion with HDL 5 New Business Objects Supported 5 UPDATE
More informationSalesforce Enterprise Edition Upgrade Guide
Salesforce Enterprise Edition Upgrade Guide Salesforce, Spring 16 @salesforcedocs Last updated: February 11, 2016 Copyright 2000 2016 salesforce.com, inc. All rights reserved. Salesforce is a registered
More informationCall: Hyperion Planning Course Content:35-40hours Course Outline Planning Overview
Hyperion Planning Course Content:35-40hours Course Outline Planning Overview Oracle's Enterprise Performance Management Planning Architecture Planning and Essbase Navigating Workspace Launching Workspace
More informationQ&A Session for Connect with Remedy - CMDB Best Practices Coffee Break
Q&A Session for Connect with Remedy - CMDB Best Practices Coffee Break Date: Thursday, March 05, 2015 Q: When going to Asset Management Console and making an update on there, does that go to a sandbox
More informationUSER GUIDE Summer 2015
USER GUIDE Summer 2015 Copyright and Disclaimer This document, as well as the software described in it, is furnished under license of the Instant Technologies Software Evaluation Agreement and may be used
More informationSnapshot Best Practices: Continuous Integration
Snapshot Best Practices: Continuous Integration Snapshot provides sophisticated and flexible tools for continuously keeping Salesforce accounts, developer projects, and content repositories synchronized.
More informationIntegrating AirWatch and VMware Identity Manager
Integrating AirWatch and VMware Identity Manager VMware AirWatch 9.1.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
More informationSetting Access Controls on Files, Folders, Shares, and Other System Objects in Windows 2000
Setting Access Controls on Files, Folders, Shares, and Other System Objects in Windows 2000 Define and set DAC policy (define group membership, set default DAC attributes, set DAC on files systems) Modify
More informationOIG 11G R2 Field Enablement Training
OIG 11G R2 Field Enablement Training Lab 5 - Request Using Profiles Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible
More informationNotification Template Limitations. Bridge Limitations
Oracle Cloud Known Issues for Oracle Identity Cloud Service Release 18.1.2 E55915-17 February 2018 Notification Template Limitations Note the following limitations with Oracle Identity Cloud Service notification
More informationWorkday Deployment Guide Version 4.0
Workday Deployment Guide Version 4.0 Deployment Guide Overview SAML Configuration Workday Driven IT Provisioning Overview Basic Provisioning Configuration Workday Provisioning Groups Real Time Sync Attribute
More informationInCycle InRelease User Guide
InCycle InRelease User Guide ABOUT THIS GUIDE The User Guide for the InCycle InRelease is for administrators and users. The following related documents for InRelease are also available: User Guide, which
More informationTable of Contents. Configure and Manage Logging in to the Management Portal Verify and Trust Certificates
Table of Contents Configure and Manage Logging in to the Management Portal Verify and Trust Certificates Configure System Settings Add Cloud Administrators Add Viewers, Developers, or DevOps Administrators
More informationSelectica Contract Lifecycle Management. Release Notes. Selectica CLM Release 6.1. January 2014 v3.0
Selectica Contract Lifecycle Management Release Notes Selectica CLM Release 6.1 January 2014 v3.0 Selectica CLM R.6.1 Release Notes Introduction... 3 Notable Changes... Error! Bookmark not defined. Certification
More informationOracle Oracle Identity Manager 11g
RSA SecurID Ready Implementation Guide Partner Information Last Modified: August 24, 2014 Product Information Partner Name Web Site Product Name Version & Platform Product Description Oracle www.oracle.com
More informationCA Identity Manager. Implementation Guide
CA Identity Manager Implementation Guide 12.6.4 This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is for
More informationUnderstanding Roles Based Provisioning 4.01 Roles, Security and Resource Model-Lecture
Understanding Roles Based Provisioning 4.01 Roles, Security and Resource Model-Lecture NIQ21 Novell Training Services ATT LIVE 2012 LAS VEGAS www.novell.com Legal Notices Novell, Inc., makes no representations
More informationConnect with Remedy: SmartIT: Social Event Manager Webinar Q&A
Connect with Remedy: SmartIT: Social Event Manager Webinar Q&A Q: Will Desktop/browser alerts be added to notification capabilities on SmartIT? A: In general we don't provide guidance on future capabilities.
More information