This workshop covers the two main points of integration between IBM Tivoli Identity Manager and IBM Tivoli Directory Integrator: Loading of HR (people) data and using IBM Tivoli Directory Integrator as an end point for provisioning (i.e. agent). IBM Tivoli Identity Manager and IBM Tivoli Directory Integrator are two of the essential components of the IBM Identity Management Solution. These two products complement each other in the development of an integrated solution that provides end-to-end identity management.
Objectives
This course enables you to build the necessary knowledge and skills to:
Have a working knowledge of how to configure ITIM and IDI to accomplish the tasks of loading people data and provisioning users.
Use ITIM – IDI connectors for data synchronization.
Use ITIM – IDI connectors as an agent.
Course outline
IBM Tivoli Directory Integrator Integration with IBM Tivoli Identity Manager 4.6
This unit will provide you with an overview of how IBM Tivoli Directory Integrator interfaces with IBM Tivoli Identity Manager. You will also learn about the capabilities of IBM Tivoli Directory Integrator when used with IBM Tivoli Identity Manager.
Defining a Custom Person Entity Object in ITIM
IBM Tivoli Identity Manager provides a default person entity which is based on inetOrgPerson. Often it is necessary to define one or more custom person entities. These are used to categorize the various kinds of users in IBM Tivoli Identity Manager into categories such as regular employees, contractors, temporary employees, business partner users and external users.
Loading People Data from IDI Using Reconcile
This unit will cover the use of reconciliation to load identity data from IBM Tivoli Directory Integrator into IBM Tivoli Identity Manager. The identity data is collected by IBM Tivoli Directory Integrator from the enterprise identity store, usually an HR database.
Loading customer specific people data from IDI using the JNDI interface
IBM Tivoli Directory Integrator can be used to send JNDI requests to IBM Tivoli Identity Manager and keep the identity data updated without using reconciliation. The identity data is collected by IBM Tivoli Directory Integrator from the enterprise identity store and passed on to IBM Tivoli Identity Manager using JNDI requests.
Defining a Custom ITIM Service Profile
This unit will guide you through the components required to define an agent schema. You will learn about the configuration files that are used to define the agent, and how to install that profile into IBM Tivoli Identity Manager. Finally, you will create a service from this new custom profile.
Using IBM Tivoli Directory Integrator as an IBM Tivoli Identity Manager Agent
This unit will introduce you to the assembly lines and the DSMLv2 Event handler. You will learn how to use IBM Tivoli Directory Integrator as an agent for IBM Tivoli Identity Manager.
Who will benefit from this course
The workshop is designed to provide the participants an opportunity to gain a working knowledge of two of the most common uses of IBM Tivoli Directory Integrator in an IBM Tivoli Identity Manager environment. The participants will first utilize IBM Tivoli Directory Integrator to load data from an HR source into the IBM Tivoli Identity Manager "People" store and then they will utilize IBM Tivoli Directory Integrator to provision a user account to an LDAP directory and to a fictitious DB2 database application. The workshop assumes that the participants are familiar with the IBM Tivoli Identity Manager functionality and have had some experience or an introductory class on IBM Tivoli Directory Integrator. Upon completion, the participants should have a working knowledge of how to configure IBM Tivoli Directory Integrator as both a data loading process and as an end-point agent.
Required skills/knowledge
The following skills are expected:
A basic knowledge of JavaScript
A working knowledge of IBM Tivoli Identity Manager
A basic knowledge of IBM Tivoli Directory Integrator or an introductory course
If you are unable to locate a course at the time and location you desire, including
training for prior product releases, please feel free to contact your regional delivery
management team:
