Sun Java System Identity Manager: Deployment Fundamentals

Prerequisites:

To succeed fully in this course, students should have previous experience with enterprise software deployment and web application servers, and have basic system administration skills. Previous experience with Java technology, pages created with the JavaServer Pages software (JSP pages), eXtensible Markup Language (XML), Lightweight Directory Access Protocol (LDAP), and identity management is strongly recommended.

Course Description:

The Sun Java System Identity Manager: Deployment Fundamentals course presents product concepts from a deployment perspective. It focuses on addressing customer business needs by emphasizing specific product features. The course is focused on using out of the box features that do not require in-depth technical knowledge and experience. Students configure roles, resources, reconciliation, and user objects in ways that are useful for meeting customer requirements. In addition, students distribute administrative tasks to other users to model a delegated administrative environment. A case study is the foundation for implementing XPRESS, forms, rules, and provisioning workflows. This course is a prerequisite to the Sun Java System Identity Manager: Advanced Deployment Concepts course for individuals who require additional experience customizing Sun Java System Identity Manager (Identity Manager).

Course Objectives

On completing the course, you will be able to:

- Describe how Identity Manager can be used as an identity management solution
- Implement a basic Identity Manager configuration to support regulatory compliance
- Implement a password management and pass-through authentication strategy to support corporate password policies and password self-service requirements
- Customize the Identity Manager User and Administrative interfaces to meet corporate branding and password management requirements
- Write XPRESS code to transform and validate data to help implement business logic in Identity Manager
- Implement a delegated administration environment and customize standard rules, forms, and workflow to support project-based administration requirements

Who Should Attend

Students who can benefit from this course are identity management deployment engineers, architects, implementors, professional services consultants, partners, and other technical personnel directly responsible for deploying an identity management solution using Identity Manager.

This course includes the following modules:

Sun Java System Identity Manager Overview

• Describe the problems that Identity Manager is designed to address
• List Identity Manager features
• Describe the Identity Manager architecture
• Describe a typical Identity Manager implementation
• Summarize the course case study
• Discuss a phased approach to deploying Identity Manager

Connecting to Remote Systems

• Describe the case study requirements for implementing regulatory compliance and self-service
• Describe how to configure connectivity to remote systems

Creating Administrative Objects

• Describe the basic Identity Manager administrative objects

Selecting a Primary Resource to Seed Identity Manager Users

• Describe the identity seeding process
• Describe how to select a primary resource to seed Identity Manager users

Seeding Identity Manager Users Using Reconciliation

• Describe how to seed Identity Manager users using reconciliation
• Describe the reconciliation situations and responses

Running Basic Identity Manager Reports

• Describe the basic Identity Manager reports available for helping achieve regulatory compliance

Implementing Password Management

• Describe the case study requirements for managing passwords
• Describe Identity Manager passwords and password policies
• Describe approaches to common password challenges

Implementing Pass-through Authentication

• Describe the case study requirements for pass-through authentication
• Describe pass-through authentication in Identity Manager

Customizing Identity Manager Interfaces

• Describe the case study requirements for branding and modifying the Identity Manager interfaces
• Customize the Identity Manager User and Administrative interfaces
• Describe how a custom message catalog can be used for displaying user-defined messages on the interfaces
• List the Identity Manager forms used to customize the default end-user experience
• Describe how to disable the Forgot Your Password button

Implementing Business Logic in Identity Manager

• Describe XPRESS, its rationale, and its uses
• Describe the differences between XPRESS and the XML Object language
• Describe and evaluate XPRESS functions
• Describe the methods of creating and debugging XPRESS
• Describe rules and rule syntax
• Use the BPE to create and test rules
• Create and use rule libraries

Implementing a Delegated Administration Environment

• Describe the case study requirements for creating a delegated administration environment
• Describe the Identity Manager delegated administration model
• Use organizations to control administration scope
• Use administrative capabilities to assign rights to users
• Use forms to control administrator visibility to attributes
• Use Admin Roles to provide granularity of administration
• Use approvals within delegated administration

Generic Objects, Path Expressions, and View Data in Identity Manager

• Describe the case study requirements that require form customization
• Describe how Generic Objects and path expressions are used to represent and reference Identity Manager data
• Describe how Identity Manager views are used to manage a user's identity

Creating Custom Forms

• Describe form processing and the form components used to create custom forms
• Describe how you can use business logic in forms to manipulate form data
• List guidelines for form customization

Overview of Workflow in Identity Manager

• Describe workflow in Identity Manager
• Describe workflow debugging and tracing

Customizing Workflow in Identity Manager

• Describe the case study requirements that require workflow customization
• Describe the workflow components used to create custom workflows
• Describe the default provisioning tasks to manage resource accounts
• Describe the life cycle of a view
• Describe typical customizations to user provisioning