Implementing Approval Based Workflow with the Enhanced Provisioning Module for Novell Nsure® Identity Manager

Robert Price

Nsure Engineering

rprice@novell.com

Novell, Inc.

Ferris Argyle

Nsure Product Management

fargyle@novell.com

Novell, Inc.

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

What is SIM

Managing the Full User Lifecycle

USER
LIFECYCLE

Relationship Begins

Promotion

Move

Locations

New Project

Forgot

Password

Relationship

Ends

Password

Expires

Provisioning

Routine User
Administration

Password
Management

De-Provisioning

Access

Resources

Single Sign-On

Access Management

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

IDM2
Today and Tomorrow

Identity Manager Today

Infrastructure

Visual Applications

End-user &

Admin GUI

End-user Identity Applications and Visual Configuration Facilities

Powerful Identity Provisioning and Aggregation

Nsure Identity

Manager 2

eGuide

Password Self-Service

Password Management

Policy Builder

Distributed Authority

Automated Provisioning

Extensive Connectivity

Role Based Entitlements

Logging, Monitoring, Auditing

Identity Manager Tomorrow

Infrastructure

Visual Applications

Rapid Prototyping and Customer Value through Visual End User Applications

End-user &

Admin GUI

Powerful Identity Provisioning and Aggregation

Nsure Identity

Manager 2

Approval Workflow

Advanced White Pages

Advanced Organizational Charting

Lightweight User Administration

Delegated Administration

Visual Design, Deployment & Configuration

Distributed Authority

Automated Provisioning

Extensive Connectivity

Role Based Access Control

Logging, Monitoring, Auditing

…and in your Business Environment

Infrastructure

Visual Applications

Rapid Prototyping and Customer Value through Visual End User Applications

End-user &

Admin GUI

Powerful Identity Provisioning and Aggregation

Nsure Identity

Manager 2

Distributed Authority

Automated Provisioning

Extensive Connectivity

Role Based Access Control

Logging, Monitoring, Auditing

Customize the Applications to meet the Business Need

exteNd

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

EPM Installation

Prerequisites

exteNd 5.2 Installed

exteNd Director Project created

LDAP Directory Service to eDir instance

If desired

NMAS

IDM

Delivered as a single Jar file

Recommended Platforms coming in final webinar

EPM Installation Steps

Install patch for exteNd 5.2

Create Director Project (or use existing)

Extract and run epminstall to project

Configure eDirectory™ Connection

Configure Virtual Identity Layer

Deploy Project

EPM Patches

exteNd Director 5.2 Patch

DR520-47381 – Addresses performance issues under load

Required by EPM

Fixed in exteNd 5.2.1, due by BrainShare SLC

exteNd Composer 5.2 Patch

TID-2969476 – Updates LDAP classes

Required for Password Management portlets when Composer and EPM installed together

Fixed in exteNd 5.2.1

LDIF Files

extElemImport.ldif

Required for Director applications, adds UUID

<exteNd5>\Director\bin

srvprv-extensions.ldif

Required for EPM applications

<EPMProject>\WEB-INF\schema\ldap-ext\

sample-extensions.ldif

Only needed for EPM sample data

<EPMProject>\WEB-INF\schema\sample-ldif\

sample-data.ldif

Contains EPM sample data, ou=epmsample

<EPMProject>\WEB-INF\schema\sample-ldif\

Sample Data

Enhanced Provisioning Module includes pre-configured sample data for demos and POCs

Schema extensions to provide multi-type devices and make device assignments to users – LDIF

Sample data containing Users, Groups and devices – LDIF

Sample VDD XML files

Default Portlet preferences

Sample Shared Pages

EPM project includes several sample shared pages, containing the EPM portlets

Imported using DAC Administrative Tools

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

Implementation

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

Configuring Virtual Identity Layer

The “heavy lifting” of EPM Installation

Must map customer's tree to this virtual layer using the VDD files

Virtual Identity Layer

Portal Layer

Virtual Data Model Layer (VDM)

Virtual Data Definition Layer (VDD)

Persistent Layer

Identity Portlet, Password Management, Approval Flows

Public API (restricted SPI in CharlesRiver)

Datasource, Entity, Attribute mapping/configuration

Logical view of multiple instances of eDirectory

Virtual Data Access Layer (VDA)

JNDI, eDirectory extensions, Director pooling

eDirectory

Instance(s)

XML File on local

file directory

Configuring Virtual Data Definition

VirtualDirectoryService subsystem's config.xml specifies the VDD files' location

default: <EPMProject>/WEB-INF/schema/sample-xml

vdd-datasource.xml – defines eDir connection params

vdd-entity.xml – defines eDir objects exposed to EPM

vdd-<entity>-attributes.xml

defines attribs exposed for a specific entity

vdd-user-attributes.xml, for example

vdd-relationship-list.xml

required by the OrgChart Relationship Designer

Others...

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

Session Agenda

What is SIM

Identity Manager Today and Tomorrow

Enhanced Provisioning Module Installation & Configuration

Implementation

Installation Demo

Show VDD Files

Demo Walkthru

Note that competitors such as Waveset and BusinessLayers are primarily in the middle layer:

they lack the connectivity and synchronization facilities of Identity Manager, relying primarily on protocols such as LDAP, JDBC and XML

they lack the robust extension framework of exteNd: customization is typically through javascript or other such facilities

TUT 147 EPM

Enhanced Provisioning Module (EPM) Functional Demo

Enhanced Provisioning Module EPM

Enhanced Provisioning Module (EPM) Functional Demo

2003-12-08T12:43:39

Jim Demarest