You create the Entitlements Service driver by installing the driver packages and then modifying the configuration to suit your environment. After you create and configure the driver, you need to deploy it to the Identity Vault and start it.
The driver packages contain the items required to create a driver, such as policies, entitlements, filters, and Schema Mapping policies. These packages are only available in Designer and can be updated after they are initially installed.You must have the most current version of the packages in the Package Catalog before you can create a new driver object.
To verify you have the most recent version of the driver packages in the Package Catalog:
Open Designer.
In the toolbar, click
> .Click
to update the packagesor
Click
if the packages are up-to-date.In the Outline view, right-click the Package Catalog.
Click
.Select any Role-Based Entitlement driver packages
or
Click
to import all of the packages displayed.By default, only the base packages are displayed. Deselect
to display all packages.Click
to import the selected packages, then click in the successfully imported packages message.After the current packages are imported, continue with Section 4.1.2, Installing the Driver Packages.
After you have imported the current driver packages into the Package Catalog, you can install the driver packages to create a new driver.
In Designer, open your project.
In the Modeler, right-click the driver set where you want to create the driver, then click
> .Select
, then click .On the Role-Based Entitlements page, specify a name for the driver, then click
.Review the summary of tasks that will be completed to create the driver, then click
.After the driver packages are installed, if you want to change the configuration of the Role-Based Entitlement driver, continue to Section 4.1.3, Configuring the Driver Settings.
or
If you do not need to change the configuration, continue with Section 4.1.4, Deploying the Driver.
After you import the driver configuration file, the Role-Based Entitlements Service driver will run. However, there are many configuration settings that you can use to customize and optimize the driver. The settings are divided into categories such as Driver Configuration, Engine Control Values, and Global Configuration Values (GCVs). The settings are described in Section A.0, Driver Properties.
If you do not have the Driver Properties page displayed in Designer:
Open your project.
In the Modeler, right-click the driver icon or the driver line, then select
.Make the changes you want, then click
.Continue with Section 4.1.4, Deploying the Driver.
After a driver is created in Designer, it must be deployed into the Identity Vault.
In Designer, open your project.
In the Modeler, right-click the driver icon or the driver line, then select
.If you are authenticated to the Identity Vault, skip to Step 5; otherwise, specify the follow information:
Host: Specify the IP address or DNS name of the server hosting the Identity Vault.
Username: Specify the DN of the user object used to authenticate to the Identity Vault.
Password: Specify the user’s password.
Click
.Read the deployment summary, then click
.Read the successful message, then click
.Click
to assign rights to the driver.The driver requires rights to objects within the Identity Vault and to the input and output directories on the server. The Admin user object is most often used to supply these rights. However, you might want to create a DriversUser (for example) and assign security equivalence to that user. Whatever rights that the driver needs to have on the server, the DriversUser object must have the same security rights.
Click
, then browse to and select the object with the correct rights.Click
twice.Click
to exclude users that should not be synchronized.You should exclude any administrative User objects (for example, Admin and DriversUser) from synchronization.
Click
.When a driver is created, it is stopped by default. To make the driver work, you must start the driver and cause events to occur. Identity Manager is an event-driven system, so after the driver is started, it won’t do anything until an event occurs.
To start the driver:
In Designer, open your project.
In the Modeler, right-click the driver icon or the driver line, then select
.For information about management tasks for the driver, see Section 8.0, Managing the Driver.