Contents

• INTRODUCTION
  • 1. About This Manual
    • 1.1 Conventions
    • 1.2 Feedback and help
    • 1.3 Navigation
  • 2. Glossary
  • 3. About ID-Synch
    • 3.1 Automated administration
    • 3.2 Authorization workflow for change requests
    • 3.3 Central and delegated user administration
    • 3.4 Fulfillment engine
    • 3.5 Administration for physical devices
    • 3.6 Reporting and auditing
    • 3.7 Access control system
    • 3.8 Directory cleanup
    • 3.9 Nightly processing
    • 3.10 E-mail integration
    • 3.11 Supported systems
  
  
• PRE-INSTALLATION
  • 4. Gathering Information
    • 4.1 Roles and Responsibilities
    • 4.2 Target systems
    • 4.3 Login IDs
    • 4.4 Accounts
      • 4.4.1 Roles
      • 4.4.2 Account dependencies
      • 4.4.3 Account request attributes
      • 4.4.4 Access controls
    • 4.5 Workflow
      • 4.5.1 Existing workflow
      • 4.5.2 Delegated account administration
      • 4.5.3 Automated workflow engine
    • 4.6 ID-Synch administrator access
    • 4.7 Authorizers
    • 4.8 Proxy servers
    • 4.9 Password policy
    • 4.10 Interface details
    • 4.11 Web interface customizations
  • 5. Installation Task List
  • 6. Preparing for Installation
    • 6.1 Before you start
    • 6.2 Preparing the ID-Synch server
    • 6.3 Preparing accounts on target systems
    • 6.4 Cryptographic certificate
    • 6.5 Assisted installation
  
  
• INSTALLING AND CONFIGURING ID-SYNCH
  • 7. Installing the Software
    • 7.1 Downloading the software archive
    • 7.2 Running setup
    • 7.3 ID-Synch server setup
      • 7.3.1 Adding alternate instances
  • 8. Using the Central Console
    • 8.1 Searching in ID-Synch
      • 8.1.1 Modifying the find threshold
  • 9. Configuring Target Systems
    • 9.1 Adding target systems
      • 9.1.1 Defining additional target administrators
      • 9.1.2 Adding authorizers for a target
    • 9.2 Target operation locking
      • 9.2.1 When to add manual locks
      • 9.2.2 Defining a lock file directory
      • 9.2.3 Setting lock file rules
    • 9.3 Configuring target attributes
      • 9.3.1 About override levels
      • 9.3.2 About the target attribute configuration page
      • 9.3.3 Overriding target attribute group default actions
      • 9.3.4 Overriding configured actions for individual target attributes
      • 9.3.5 Adding configured actions for individual target attributes
      • 9.3.6 Specifying attribute values
      • 9.3.7 Deleting specified attribute values
  • 10. Managing Users
    • 10.1 Adding end users
    • 10.2 Adding console users
      • 10.2.1 Enabling and disabling console users
  • 11. Configuring Authentication
    • 11.1 Identifying users
    • 11.2 Setting the target authentication order
    • 11.3 Setting the number of targets for authentication
    • 11.4 Setting the number of allowed password failures
  • 12. Defining a Password Policy
    • 12.1 Editing the password strength policy
      • 12.1.1 Password strength rules
    • 12.2 Adding new rules with a plug-in program
    • 12.3 Adding new rules using regular expressions
  • 13. Configuring Web Modules
    • Modifying configuration variables
    • Testing modules
    • 13.1 Modifying general behavior
      • 13.1.1 Confirming changes on major operations
      • 13.1.2 Setting the inactivity timeout period
      • 13.1.3 Modifying the threshold to display items
      • 13.1.4 Automatic storage/retrieval of field values
    • 13.2 Access to consoles and modules
      • 13.2.1 Front-end authentication (Default)
      • 13.2.2 Authentication to individual consoles and modules
    • 13.3 Configuring workflow options
    • 13.4 Triggering external programs
    • 13.5 Extending functionality with plug-ins
      • 13.5.1 Filtering accounts or groups available to users
      • 13.5.2 Pre-selecting templates for users
      • 13.5.3 Restricting operations allowed for requesters
  • 14. Configuring Workflow
    • 14.1 Overview
      • 14.1.1 Configuration process
      • 14.1.2 Navigating from the workflow configuration menu
    • 14.2 Defining authorizers
      • 14.2.1 Adding authorizers
    • 14.3 Defining locations
    • 14.4 Defining types
    • 14.5 Defining templates
      • 14.5.1 Adding templates
      • 14.5.2 Defining authorizers for a template
      • 14.5.3 Defining dependencies
    • 14.6 Defining roles
      • 14.6.1 Adding roles
      • 14.6.2 Adding templates and sub-roles to a role
      • 14.6.3 Defining authorizers for a role
    • 14.7 Defining request attributes
      • 14.7.1 Adding request attributes
      • 14.7.2 Deleting request attributes
      • 14.7.3 Grouping attributes
    • 14.8 Managing account groups
      • 14.8.1 Setting up group management
    • 14.9 Managing inventory
      • 14.9.1 Adding inventory objects
      • 14.9.2 Making inventory objects available for provisioning
      • 14.9.3 Removing inventory objects
    • 14.10 Workflow plug-ins and mail
      • 14.10.1 Sending mail
      • 14.10.2 E-mail reminder intervals and scheduling
      • 14.10.3 Authorizer list plug-in
      • 14.10.4 ID generator plug-in
      • 14.10.5 Allowing automatic ID approval
      • 14.10.6 Managing inventory lists on an external source
      • 14.10.7 Modifying global workflow variables
      • 14.10.8 Editing the e-mail files
    • 14.11 Workflow options
  • 15. Access Controls
    • 15.1 About attribute groups
      • 15.1.1 Displaying attributes
      • 15.1.2 Rights and group membership
    • 15.2 Configuring attribute groups and access control
      • 15.2.1 Adding an attribute group
      • 15.2.2 Adding attribute group members
      • 15.2.3 Assigning attribute group privileges to user groups
      • 15.2.4 Adding user groups
      • 15.2.5 Adding members to user groups
  • 16. Securing Connections with an ID-Synch Proxy
    • 16.1 Installing ID-Synch on a proxy server
      • 16.1.1 Preparing an ID-Synch proxy server
      • 16.1.2 Installing the software
    • 16.2 Configuring ID-Synch targets to use the proxy server
    • 16.3 Updating proxy servers from the ID-Synch server
  • 17. Scheduling Maintenance
    • Managing and scheduling jobs
  
  
• USING ID-SYNCH
  • 18. Overview
    • 18.1 Accessing ID-Synch
    • 18.2 Navigating in ID-Synch
    • 18.3 Deleting in ID-Synch
    • 18.4 Updating information
    • 18.5 Using ID-Synch search pages
  • 19. Automated Authorization Workflow
    • 19.1 The self-service options menu
  • 20. Account administration
    • 20.1 Changing your console login password
  • 21. Adding accounts
    • 21.1 Choosing a recipient
      • 21.1.1 New users
      • 21.1.2 Existing users
      • 21.1.3 Yourself
    • 21.2 Common steps for requesting or creating accounts
  • 22. Modifying existing accounts
    • 22.1 Modifying other users
      • 22.1.1 Disabling and enabling accounts
      • 22.1.2 Updating attributes
      • 22.1.3 Deleting accounts
      • 22.1.4 Managing a user's account group membership
      • 22.1.5 Moving accounts to another directory
    • 22.2 Modifying your own attributes
  • 23. Authorization and approval
    • 23.1 Account operations and inventory provisioning
    • 23.2 Profile IDs
    • 23.3 Reviewing requests
      • 23.3.1 Reviewing multiple requests
      • 23.3.2 Reviewing single requests
  • 24. Tracking and cancelling requests
    • 24.1 Tracking requests
    • 24.2 Canceling a request
  
  
• POST-INSTALLATION
  • 25. Monitoring the Server
  • 26. Backups and Restores
  
  
• MISCELLANEOUS
  • 27. Regular Expressions
  • 28. Credits
    • 28.1 Regular expression parser
    • 28.2 Dictionary
  
  
• Index