14.5 Defining templates

ID-Synch uses templates to automatically create new accounts based on the parameters of pre-existing accounts.

Read this section to learn how to use the Workflow configuration menu in the Central console (nph-psa.exe) to:

• Add templates by selecting the user account which defines their parameters.
• Add authorizers to define who will approve requests based on each template.
• Define template dependencies.

To learn how to combine templates to create a role, see Defining templates in roles.

14.5.1 Adding templates

Before you start:

• Configure target systems in ID-Synch.
• Set up accounts on each target system to use as templates in ID-Synch. Document each login ID and the parameters set for the account. You will need to reference this information when you select accounts to use as templates.

  See the full manual shipped with the ID-Synch software for information about creating accounts on specific systems.

• Define authorizers so that you can assign them to templates.
• It is recommended that you define locations and account types to help define templates.
• You must define inventory types if you are going to use templates to provision inventory objects.

To add templates:

1. From the Workflow configuration menu click Templates to navigate to the Template information form.

2. Type the ID (up to 80 characters) and Description that displays to ID-Synch users.
3. Select the Target system ID for the account's target system.
4. Type the login ID for the Account to use for replication, or click Search next to this field to search for the account you want to use.

   This is required unless the template is to be used only for provisioning inventory.

5. If a password is not required (e.g. for inventory objects or insecure accounts) disable the Password required check box.

6. If required, enable the Used for inventory provisioning check box.

   See HERE for more information about this option.

7. Type the Minimum number of authorizers if accounts based on this template require approval before being created.

8. Select the check box for Rejection of this template blocks entire request if you want approval of a request for new accounts to depend on approval of this template.

9. Required: If the template is to be used for inventory provisioning, select the inventory Location and Type.

   OR

   Optional: If the template is not used for inventory provisioning, select the account Location and Type.

10. Click Add.

11. Click Back to return to the Select a template page or Main to return to the Central console (nph-psa.exe) main menu.

Now you can:

• Assign authorizers to the template. See HERE. If you entered a Minimum number of authorizers, you cannot use the template until you assign sufficient authorizers.
• Set up template dependencies. See HERE.
• Add the template to a role. See Defining templates in a role.

14.5.2 Defining authorizers for a template

Add authorizers to a template to define who approves account requests based on the template. You must assign enough authorizers to meet the minimum set when creating the template.

Before you start:

• Create the template as described in HERE.
• Define users as authorizers in ID-Synch.

To add authorizers to templates:

1. On the Template information form, click Add in the Authorizers for this template section.

2. If required, enter ID search criteria in the Specify authorizer search criteria page, or leave the field blank to see a list of all authorizers, then click Search.

   ID-Synch displays the Select authorizers page.

3. Click the check boxes next to the authorizers you want to approve account requests based on this template.
4. Click Add.

To remove authorizers from a template, click Delete next to the name of the authorizer on the Template information page. The authorizer still exists in the ID-Synch database, and can be assigned to other templates.

• Define template dependencies. See HERE
• Combine templates to create a role. See HERE.

14.5.3 Defining dependencies

Dependencies tell ID-Synch to verify that a user has an account on one system before it creates a new account for the same user on another system. You can define these dependencies based on:

• Business rules. For example, you may require that all users must have a mainframe ID.
• Technical requirements. (e.g., a Windows NT account must exist before a Microsoft Exchange account can be created)

Before you start, create the template as described in HERE.

To define a template dependency:

1. On the Template information form, click Add in the This template depends on section.

2. If required, enter search criteria in the Specify template search criteria page, or leave the fields blank to see all templates.

   ID-Synch displays the Select templates page.

3. Click the check boxes next to the templates you want to be pre-requisites.

4. Click Add.

To remove dependencies from a template so that ID-Synch no longer checks for the existence of the pre-requisite account, click Delete next to the account ID on the Template information page of the dependent template.

Combine templates to create a role. See HERE.