14.9 Managing inventory

ID-Synch can manage access to physical devices such as SecurID tokens, building access badges and other devices, and can be integrated with an asset management system to manage PCs, furniture, telephones and other inventory.

Add inventory objects so that they can be assigned to users when accounts are created and recovered when they are no longer required. ID-Synch maintains a list of inventory objects in the INVOBJ database table.

When an account request includes the provisioning of inventory objects, an assigned inventory manager receives an e-mail requesting that the provisioned object be delivered to the user.

You must define at least one location and one inventory type before adding inventory objects.

14.9.1 Adding inventory objects

To add inventory objects:

1. From the Workflow configuration menu click Inventory to navigate to the Inventory object information form.

2. Type the ID that will display in the inventory objects selection list.

3. Select Type and Location.

4. If the object is not to be used for provisioning, enable the Reserved check box .

5. Add Notes as required. These notes will display the inventory objects selection list.

   Note that ID-Synch shows the word No next to Assigned?. This text changes to $<$User full name$>$ once the object has been assigned or approved for assignment.

6. Click Back to return to the Select an inventory object page or Main to return to the Central console (nph-psa.exe) main menu.

14.9.2 Making inventory objects available for provisioning

Inventory objects do not become available for provisioning to users until the inventory type and location are associated with a template.

When an account request includes a template used for provisioning inventory objects, requesters are presented with a page allowing them to select objects to supply to recipients. If no objects are selected ID-Synch allocates the first available inventory object with the specified type and location.

For example, templates on ACE targets can be configured so that new account requests include the provisioning of a token. The template can be used to set attributes on the token.

For the provisioning of objects such as computers and other equipment, set up a Null type target. You can then set up templates associated with each inventory type and location. Templates of this kind do not need to be linked to a real account.

For example:

1. Inventory objects ID=PDA123 and ID=PDA456 are included in a group of objects classified by type=PDA and location=New York City.
2. A template is defined as:
   • ID=INV_PDA
   • Target=Warehouse (Null target)
   • Type=PDA
   • Location=New York City
3. A user makes a request that includes template INV_PDA and selects object PDA1234 for provisioning.
4. An authorizer assigned to the template approves the request.
5. The recipient owns an "account" called PDA1234 on the null target Warehouse
6. The authorizer assigned as inventory manager for the New York City location arranges for delivery.

To associate inventory objects with a template:

1. Add or update a template in the Workflow configuration menu.

   See HERE for more information.

2. In the Template information form, enable the Used for inventory provisioning check box.

3. Set the Type and Location that define the inventory objects you want to provision for this account.

4. Make other changes as necessary and click Add or Update.

Note:

Requesters can select only one inventory object per template.

14.9.3 Removing inventory objects

ID-Synch lets you use the Central console (nph-psa.exe) to remove inventory objects from assigned users if, for example, you want to make them available to other users. To do this:

1. From the Workflow configuration menu click Current inventory.

   ID-Synch displays the Specify inventory object search criteria or Select an inventory object page.

2. Search for and/or select the inventory object you want to retrieve from a user.

   ID-Synch displays the Inventory object information form.

3. Click Remove next to Assigned: $<$user name$>$.