Sun Identity Manager: Resource Functions

Now I’ve explained the objects used within an identity enviroment, I am going to detail the functions related to the resources. For more information about the resources, you can read previous post.

Recursos

The principal resource’s functions are connection configuration and data obtention. There are two ways to obtain data: synchronization and reconciliation. The first one is used for authoritative resources, and the second one for the non-authoritative ones.

Connection

Sun Identity Manager is connected to the resources by several specific adapters included in the product. This way it shows an uniform interface for every resource, you just need to enter connection parameters.

You have also to add an attributes list which are the data that is going to be collected from the resource to be procesed by Identity Manager.

Synchronization (Active-Sync)

This obtaining data function is used for authoritative sources. Collect data from the resource and spreads it to the rest of the resources. The data spread doesn’t necessary mean that this information is saved in Identity Manager or in the rest of resources, but depending on the attributes definition it can be saved or kept in the resource.

It can be scheduled to be activated automatically for specific dates and times.

I uses rules to correlate resource’s accounts with Identity Manager’s users. It looks around every account in the resource and based in those rules links resource’s accounts with the user.

Depending on the resource configuration it could create, modify or even delete users in Sun Identity Manager on the basis of the resource’s account information.

Reconciliation

This function is used for non-authoritative resource. Using similar rules to correlate resource’s accounts, look around every Identity Manager accounts and link them to the resource’s accounts.

As in the synchronization, depending on the configuration it could create, modify or even delete users in Identity Manager in the basis of the resource’s account information.

Previous posts:

Introduction

Objects

Following Posts

User Functions

Tags: Sun Identity Manager

Sun Identity Manager: Objects

I am going to give more details about Sun Identity Manager, for a short description you can see the introduction. Identity Manager Objects. I am explaining the concepts that are used in Sun Identity Manager to carry out identity management, these are the following: User accounts Roles Resources and resources’ groups Organizations Capabilities Administration Roles [...]

Tags: Sun Identity Manager

Sun Identity Manager: Introduction

I’ve been working with Sun Identity Manager for a while, I am also doing my thesis about it, so I think it’s time to explain every one what’s that. Sun Java System Identity Manager (IdM) is an identity management tool distributed by Sun Microsystems. Identity Management consist in administering each user life-cycle as an unique identity within [...]

Tags: Sun Identity Manager