Symantec Identity Governance 14 - Broadcom Inc.

Transcription

Symantec Identity Governance 14.0

Symantec Identity Governance 14.0Table of ContentsRelease Notes.12Release Notes - 14.0. 12Release Notes.12Fixed Issues. 12Known Issues. 13General Considerations.21Supported Languages. 21Deprecated Platforms and Configurations.21Accessibility Features.22Bookshelves for Previous Releases. 24Release Notes - 14.0 Cumulative Patches. 24CP-IG-140001- 0001 - Defects Fixed.27CP-IG-140001-0002 - Defects Fixed. 29CP-IG-140000-0001 - Defects Fixed. 32Release Notes - 14.0 SP1. 33Platform Support Matrix. 38Server Environments. 38Client Environments.39Reporting Server. 40Connectors. 40Password Management Components. 49Appendix.49Getting Started. 52Access Governance and RBAC.52Access Governance. 55Roles and Tasks. 55Tools.58Concepts.59Architecture.61Installing. 64System Requirements.64Planning Your Implementation.67Installation Worksheets. 69Install on Wildfly.73Configure Wildfly as a Windows Service.74WildFly Installation. 762

Symantec Identity Governance 14.0JBoss 6.4 Installation. 81Configure Cluster Nodes. 87Install on an IBM WebSphere Cluster.91Install on Oracle RAC. 100Configure SSL-Encrypted Communication. 107Obtain a Digital Certificate. 111Post Installation.112Optimize Your Installation. 112Installation. 117Administrating. 118Administrative Overview.118Running a Connector.118Certification. 120Start a New Certification. 123Create a Certification Template. 124Certification Settings. 125Save Certification Decisions to an Audit Card. 127Import Previous Decisions Into a Certification.127Usage Information from CA User Activity Reporting in a Certification. 127Reviewer Settings.128Member Lists.128RACI Operations. 131Execution. 133Share My Work. 133Notifications. 134Business Policy Compliance. 136Audit Properties File.136Additional Weighted Attributes. 136Manage Business Policy Rules. 137How to Work with Business Policies. 138Create a Business Policy.138Ignore Specific Violations During Audit Checks. 144Configure Reporting.146Configure Legacy Reports. 146Extract Data for Reports and Dashboards. 149Standard Reports. 149Create Custom Reports. 150Install and Configure CA Business Intelligence JasperReports Server. 150Create Custom Reports - CA Business Intelligence JasperReports Server. 151Regenerate a Token to Authenticate CA Business Intelligence JasperReports Server. 1523

Symantec Identity Governance 14.0Business Workflows. 153Perform the Data Transformations.157Create and Apply Data Transformations. 158Define a Universe. 162Import and Verify Data.167Monitor User Activity with the Transaction Log.167Repair Configuration, User, and Resource Files. 169Purge Data.170Purge by Document. 170Purge by Date. 171Purge Portal Users from the Permissions Configuration.172Purge Workpoint Jobs Associated with a Workflow. 172Troubleshooting.173Error Messages. 173Resources Do Not Appear in BPR Drop-down List. 180Using the Pipe Character ( ) in Regular Expressions. 180Property bpr.sod.ignore.zero. 180Property bpr.all.representative. 180System Checkup. 181Configuring.183Universe Overview. 183How to Define a Universe. 184Connect to Endpoint Systems.189Import and Export Connectors.189Deep and Shallow Use Cases.192CA IAM Connector Server Connectivity Use Cases. 193Define an Import Connector. 199Using the CA IAM Connector Server. 200Add or Modify Data During Import.207Correlate Imported Accounts to Users. 208Export Data. 212Security and Encryption. 214How To Enable FIPS 140-2 Encryption.215Permissions.219Resources in the Permissions Configuration.220Filter Type Resources. 221Use Case Member List Permissions by Universe. 223Assign Users and Resources. 224Use Case Filter to Provide Self-Service Access to a User. 225Authentication.2264

Symantec Identity Governance 14.0Enable Active Directory Authentication.226Implement SSO Using CA Single Sign On. 229Enable Authentication to Workpoint Server.236How to Enable Active Directory and LDAP Authentication. 237Customize the Portal. 243Rebrand the Portal.243Do Not Remember Username at Login.244Use Image Files in Entity Records. 245Install Translated Portal Online Help Files. 246Set CA GovernanceMinder Date Format.246Define an Email Server.247Change the Default Port. 247Configure Email Notifications. 247Configure Email Link in Property Settings. 251Configure the Universe to Display Linked Attributes. 252Integrating. 253Integration with CA Identity Manager. 253Integration Concepts. 257Connectivity Use Cases.260How to Integrate with CA Identity Manager. 264Define a Connector to CA Identity Manager. 268Verify the Connection to CA Identity Manager. 272Export Data to CA Identity Manager. 274Continuous Update. 276Compliance Violations. 277Smart Provisioning. 280Best Practices for Integration.287Integration with CA User Activity Reporting Module.288Prerequisites.289Configure Communication.291Set the Application Attribute in the Universe.294Map CA User Activity Reporting Module Endpoints.294Update Usage Data. 294Enable CA User Activity Reporting Module Online Links.295Update Mapping of CA User Activity Reporting Module Applications. 295Integrate with CA User Activity Reporting. 296Upgrading. 306How to Upgrade CA Identity Governance. 307Server Prerequisites.3075

Symantec Identity Governance 14.0(JBoss) Run the Installer on Each Node.308Upgrade Process for JBoss 5.x. 308(WebSphere) Upgrade the Application Server. 309Install Client Tools.309Verify Successful Installation. 309Update Workpoint DB Administration.310Migrate Connectors.310Upgrade Campaigns.311Upgrade Jaspersoft Reports. 311Update Your Provisioning Certificates. 312Programming. 317Web Services. 317Model Event Notification API. 318Executing Batch (SBT) Files. 318CSV File Import. 338How to Create a Transformation. 342Customizing Business Flows. 346Standard Workpoint Processes.348Common Functionality in Workpoint Processes. 351Parent and Child Processes in a Workflow.360How to Customize Workflow Processes.362Optimized Handling of Workpoint Processes. 366Assigning Reviewers. 367Focal Entity of a Reviewer.368How Reviewer Assignment Works.370Define a Set of Reviewers.373Review Completion Criteria Aggregation and Weighting.376Sets of Reviewers Examples. 377Building Blocks. 379Building Blocks for Business User Actions.380Building Blocks for P

Email notification Configuration Option for CA Identity Portal This feature enables the CA Identity Governance Administrator to configure CA Identity Portal URL in Welcome Certification emails. Scheduler for Daylight Savings Release Notes