1. In Designer, open your project.

2. In the Modeler, right-click the driver set where you want to create the driver, then select New > Driver to display the Driver Configuration Wizard.

3. In the Driver Configuration list, select Role-Based Entitlements Service Driver, then click Run.

   At this point, the driver is created from the basic configuration file and will run. As with all Identity Manager drivers, the Entitlements Service driver includes configuration settings you can use to customize and optimize the driver for you environment.

4. To review or modify the default configuration settings, click Configure, then continue with the next section, Configuring the Driver Settings.

   or

   To skip the configuration settings at this time, click Close. When you are ready to configure the settings, continue with the next section, Configuring the Driver Settings.

If you do not have the Driver Properties page displayed in Designer:

1. Open your project.

2. In the Modeler, right-click the driver icon or the driver line, then select Properties.

1. In Designer, open your project.

2. In the Modeler, right-click the driver icon or the driver line, then select Live > Deploy.

3. If you are authenticated to the Identity Vault, skip to Step 5; otherwise, specify the follow information:

   • Host: Specify the IP address or DNS name of the server hosting the Identity Vault.

   • Username: Specify the DN of the user object used to authenticate to the Identity Vault.

   • Password: Specify the user’s password.

4. Click OK.

5. Read the deployment summary, then click Deploy.

6. Read the successful message, then click OK.

7. Click Define Security Equivalence to assign rights to the driver.

   The driver requires rights to objects within the Identity Vault and to the input and output directories on the server. The Admin user object is most often used to supply these rights. However, you might want to create a DriversUser (for example) and assign security equivalence to that user. Whatever rights that the driver needs to have on the server, the DriversUser object must have the same security rights.

   1. Click Add, then browse to and select the object with the correct rights.

   2. Click OK twice.

8. Click Exclude Administrative Roles to exclude users that should not be synchronized.

   You should exclude any administrative User objects (for example, Admin and DriversUser) from synchronization.

   1. Click Add, then browse to and select the user object you want to exclude.

   2. Click OK.

   3. Repeat Step 8.a and Step 8.b for each object you want to exclude.

   4. Click OK.

9. Click OK.

1. In Designer, open your project.

2. In the Modeler, right-click the driver icon or the driver line, then select Live > Start Driver.