The two main management tools for the Identity Manager solution are Designer and iManager, as illustrated in Figure 3-2. Designer is used during the planning and creation of the Identity Manager solution, and iManager is used for daily management tasks of the Identity Manager solution.
Figure 3-2 Identity Manager Management Tools
The User Application uses a Web-based administration page. For more information about the User Application, see Administering the User Application
in the Identity Manager Roles Based Provisioning Module 4.0 User Application: Administration Guide.
Analyzer is a thick client that is installed on a workstation. Analyzer is used to examine and clean the data in the systems that you want to add to your Identity Manager solution. Using Analyzer during the planning phase helps you see what changes need to be made and how best to make those changes.
There are no major considerations for using Analyzer. For more information, see the Analyzer 1.2 for Identity Manager Administration Guide.
Designer is a thick client that is installed on a workstation. Designer is used to design, test, document, and then deploy your Identity Manager solution. Using Designer throughout the planning phase helps you capture information in one place. It also helps you see issues you might not be aware of as you look at all of the components of the solution together.
There are no major considerations for using Designer, unless you have multiple people working on the same project. Designer allows for version control of the project. For more information, see Version Control
in the Designer 4.0 for Identity Manager 4.0 Administration Guide.
iManager is a Web application that is the administration tool for Identity Manager. When you install Identity Manager, the installation expects that you already have an iManager server installed in your eDirectory tree.
If you have more than 10 administrators constantly working in iManager at one time, you should have a server that hosts only iManager. Figure 3-2 represents this configuration of your Identity Manager solution. If you have only one administrator, you can run iManager on your Metadirectory server without complications.
The Role Mapping Administrator is a Web application that discovers authorizations and permissions that can be granted within your major IT systems. It allows business analysts, not just IT administrators, to define and maintain which authorizations are associated with which business roles.
There are no major considerations for using the Role Mapping Administrator. You can run the Role Mapping Administrator on a separate server as show in Figure 3-2 or you can run it on the Metadirectory server. For more information, see the Identity Manager Role Mapping Administrator 2.0 Installation and Configuration Guide.