Základní info
The Sun Identity Manager: Deployment Fundamentals course presents product concepts from a deployment perspective. The course focuses on addressing customer business needs by emphasizing specific product features. The course is focused on using out-of-the-box features that do not require in-depth technical knowledge and experience. Students configure roles, resources, reconciliation, and user objects in ways that are useful for meeting customer requirements. In addition, students distribute administrative tasks to other users to model a delegated administrative environment. A case study is the foundation for implementing XPRESS, forms, rules, and provisioning workflows. This course is the first of two courses for students who wish to deploy Sun Identity Manager solutions and prerequisite to the Sun Identity Manager: Deployment Fundamentals II (IDM-4485) course. The course focuses on Identity Manager 8.0 and 8.1 features.Sun System Identity Manager is a complete, highly scalable solution for managing, auditing, protecting, sharing and storing identity data. It helps ensure ongoing and sustainable regulatory compliance, role-based provisioning, data synchronization among multiple identity data stores, and end user self-registration.Students who can benefit from this course are:Identity management deployment engineers, architects, implementers, professional services consultants, partners, and other technical personnel directly responsible for deploying an identity management solution using Sun Identity Manager.
Audience:
- Security Administrators
- System Administrator
- Technical Consultant
Prerequisites:
- To succeed fully in this course, students should have previous experience with enterprise software deployment and web application servers, and have ba
- . Previous experience with: Java technology
- Pages created with the JavaServer Pages software (JSP pages) eXtensible Markup Language (XML)
- Lightweight Directory Access Protocol (LDAP) and Identity management is strongly recommended
Objectives:
- Write XPRESS code to transform and validate data to help implement business logic in Identity
- Manager using the NetBeans Integrated Development Environment (IDE)
- Implement a delegated administration environment and customize standard rules, forms, and workflow to support project-based administration requirements
- Customize the Identity Manager User and Administrative interfaces to meet corporate branding and password management requirements
- Describe how Identity Manager can be used as an identity management solution
- Implement a basic Identity Manager configuration to support regulatory compliance
- Implement a password management and pass-through authentication strategy to support corporate password policies and password self-service requirements
Topics:
Sun Identity Manager Overview
- Describe the problems that Identity Manager is designed to address
- Summarize the course case study
- Install and initialize Identity Manager software (Lab)
- Secure Identity Manager after an installation (Lab)
- Plan for an Identity Manager deployment (Lab)
- Create a development work area (Lab)
- Redirect email notifications to a file (Lab)
- Use the Identity Manager Console command-line utility (Lab)
Connecting to Remote Systems
- Describe the case study requirements for implementing regulatory compliance and self-service
- Describe how to configure connectivity to remote systems
- Connect to Identity Manager resources (Lab)
Creating Administrative Objects
- Describe the basic Identity Manager administrative objects
- Create Identity Manager organization, administrator, and user objects (Lab)
Selecting a Primary Resource to Seed Identity Manager Users
- Describe the identity seeding process
- Describe how to select a primary resource to seed Identity Manager users
- Select a primary resource using the case study data to seed Identity Manager users (Lab)
Seeding Identity Manager Users Using Reconciliation
- Describe how to seed Identity Manager users using reconciliation
- Describe the reconciliation situations and responses
- Seed Identity Manager users using reconciliation (Lab)
Running Basic Identity Manager Reports
- Describe the basic Identity Manager reports available for helping achieve regulatory compliance
- Describe how Data Exporter and Forensic Queries can be instrumental in achieving regulatory compliance
- Run Identity Manager reports (Lab)
- Save changes to Identity Manager objects (Lab)
Implementing Password Management
- Describe the case study requirements for managing passwords
- Describe Identity Manager passwords and password policies
- Describe approaches to common password challenges
- Configure self-service password reset (Lab)
- Create a password reset administrator (Lab)
- Run password-related reports (Lab)
Implementing Pass-through Authentication
- Describe the case study requirements for pass-through authentication
- Describe pass-through authentication in Identity Manager
- Enable pass-through authentication (Lab)
- Save changes to Identity Manager objects (Lab)
Customizing Identity Manager Interfaces
- Describe the case study requirements for branding and modifying the Identity Manager interfaces
- Customize the Identity Manager User and Administrative interfaces
- Describe how a custom message catalog can be used for displaying user-defined messages on the interfaces
- List the Identity Manager forms used to customize the default end-user experience
- Describe how to disable the Forgot Your Password button
- Customize the Identity Manager User interface (Lab)
- Customize the Administrative interface (Lab)
Implementing Business Logic in Identity Manager
- Describe the differences between XPRESS and the XML Object language
- Describe and evaluate XPRESS functions
- Describe the methods of creating and debugging XPRESS
- Use the NetBeans Integrated Development Environment to create rules, test rules
- Create and use rule libraries
- Use the NetBeans IDE to manipulate libraries and rules (Lab)
- Evaluate the output of existing XPRESS code and create XPRESS code to accomplish simple tasks (Lab)
- Write advanced rules to interface into Identity Manager objects (Lab)
Implementing a Delegated Administration Environment
- Describe the case study requirements for creating a delegated administration environment
- Describe the Identity Manager delegated administration model
- Use organizations to control administration scope
- Use administrative capabilities to assign rights to users
- Use forms to control administrator visibility to attributes
- Use Admin Roles to provide granularity of administration
- Use approvals within delegated administration
- Implement a delegated administration environment for Example Chocolate (Lab)
Generic Objects, Path Expressions, and View Data in Identity Manager
- Describe the case study requirements that require form customization
- Describe how Generic Objects and path expressions are used to represent and reference Identity Manager data
- Describe how Identity Manager views are used to manage the identity of a user
- Use the NetBeans IDE to open a user view (Lab)
Creating Custom Forms
- Describe form processing and the form components used to create custom forms
- Describe how you can use business logic in forms to manipulate form data
- List guidelines for form customization
- Create a user edit form for help desk administrators (Lab)
- Use the NetBeans IDE to debug forms (Lab)
- Create user-defined forms based on default forms (Lab)
- Create an edit form for managers (Lab)
- Implement a project assignment form for project managers (Lab)
Overview of Workflow in Identity Manager
- Describe workflow in Identity Manager
- Describe workflow debugging and tracing
- Analyze the Update User workflow (Lab)
- Turn workflow tracing on and off (Lab)
Customizing Workflow in Identity Manager
- Describe the case study requirements that require workflow customization
- Describe the workflow components used to create custom workflows
- Describe the default provisioning tasks to manage resource accounts
- Describe the life cycle of a view
- Describe typical customizations to user provisioning
- Customize workflow to incorporate approvals (Lab)
- Create an employee termination workflow process (Lab)
