Novell IDENTITY MANAGER 3.6.1 - STAGING BEST PRACTICES GUIDE... Manual de usuario

Novell®

www.novell.com

novdocx (en) 16 April 2010

AUTHORIZED DOCUMENTATION

Identity Manager 3.6.1 Staging Best Practices Guide

Identity Manager

3.6.1

June 24, 2010

Identity Manager 3.6.1 Staging Best Practices Guide

novdocx (en) 16 April 2010

Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities

on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export

laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.

Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no

responsibility for your failure to obtain any necessary export approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the online documentation for this and other Novell products, and to get

updates, see www.novell.com/documentation.

novdocx (en) 16 April 2010

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Identity Manager 3.6.1 Staging Best Practices Guide

novdocx (en) 16 April 2010

Contents 5

Contents

novdocx (en) 16 April 2010

About This Guide 7

1Overview 9

1.1 What is Staging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 Staging Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

2 Preparing for Staging 11

2.1 Identity Vault Structure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2 Drivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2.1 Driver Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2.2 Using GCVs in Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2.3 Simulation and Staging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2.3 Objects That Designer Models. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2.4 Objects That Designer Does Not Model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.5 Rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.5.1 Driver Equivalences. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.5.2 Roles Based Entitlements Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.5.3 Jobs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3 Staging a Project 17

3.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3.1.1 Importing Objects. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.2 Staging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3 Post-staging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

4 Best Practices in Moving Objects Across Stages 25

6Identity Manager 3.6.1 Staging Best Practices Guide

novdocx (en) 16 April 2010

About This Guide 7

novdocx (en) 16 April 2010

About This Guide

Welcome to Novell Identity Manager 3.6.1 Staging Best Practices Guide. This guide provides step-

by-step procedures to move your Identity Management solutions from one stage to the subsequent

stages.

This guide introduces the following:

Chapter 1, “Overview,” on page 9

Chapter 2, “Preparing for Staging,” on page 11

Chapter 3, “Staging a Project,” on page 17

Chapter 4, “Best Practices in Moving Objects Across Stages,” on page 25

Audience

The guide is intended for Identity Manager consultants and customers.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to www.novell.com/documentation/feedback.html and enter your

comments there.

Documentation Updates

For the most recent version of the Novell Identity Manager 3.6.1 Staging Best Practices Guide, visit

the Identity Manager Web site (http://www.novell.com/identity/access/identity_integration).

Additional Documentation

Understanding Designer for Identity Manager (http://www.novell.com/documentation/

designer30/designer_intro/data/front.html)

Identity Manager 3.6.1 Installation Guide (http://www.novell.com/documentation/idm36/

idm_install/data/front.html)

Understanding Policies for Identity Manager 3.6 (http://www.novell.com/documentation/

idm36/policy/data/bookinfo.html)

Policies in Designer 3.5 (http://www.novell.com/documentation/idm36/policy_designer/data/

bookinfo.html)

Novell Credential Provisioning for Identity Manager 3.6 (http://www.novell.com/

documentation/idm36/policy_credprov/data/bookinfo.html)

Identity Manager 3.6 DTD Reference (http://www.novell.com/documentation/idm36/

policy_dtd/data/bookinfo.html)

Identity Manager 3.6 Driver Guides (http://www.novell.com/documentation/idm36drivers/

index.html)

8Identity Manager 3.6.1 Staging Best Practices Guide

novdocx (en) 16 April 2010

Overview

novdocx (en) 16 April 2010

Overview

1.1 What is Staging

Software products need testing before they are deployed in an IT environment. Staging is a process

of development and testing software products. Staging provides users the flexibilty to validate

applications in real time to ensure uniformity across all stages.

Identity Manager staging is similar to any software deployment process. Nearly all the Identity

Manager projects operate in more than two stages, such as development, testing, and the production

environment.

Figure 1-1 Staging Movement

Figure 1-1 shows a basic representation of the movement of Identity Manager projects across

different stages. Three projects are developed and tested in three individual setups and then

connected in the next stage. The scale of projects grows with stages, but not necessarily the scale of

an individual driver.

Managing the movement of a tested solution across different stages and ensuring that nothing is left

out can be challenging for Identity Management consultants and customers. When Identity Manager

projects are moved from one stage to another, moving driver configurations becomes critical. To

successfully stage Identity Manager projects, certain other configurations must also be taken care of.

Novell Identity Manager Best Practices Staging Guide provides step-by-step procedures to move

your Identity Management solutions from one stage to the subsequent stages. The guide helps you to

reduce complexity in your Identity Manager deployment process, by helping you to test your

Identity Manager project at multiple stages before it is live.

In the following sections, you will find Designer at the center of discussion. As you already know,

Designer is critical to the Identity Manager project development, for developing policies, drivers,

PRDs, and so on. Designer is highly capable of bringing/creating the Identity Manager

configurations required for running an Identity Manager project and then deploying the

10 Identity Manager 3.6.1 Staging Best Practices Guide

novdocx (en) 16 April 2010

configuration on another Identity Manager deployment. You must make certain other changes that

are discussed in this guide. Designer can also export Identity Manager environments into a single

configuration file and use the file later in a different environment. You can also use any version

control system to distribute projects.

Before you begin to use this guide, you should be familiar with Identity Manager and Designer. As

you create projects, you should have a uniform Identity Vault design across all the states so that

common objects are available. Some objects are moved automatically by Designer, but others

should be moved explicitly to make them available in the next stage. See Chapter 2, “Preparing for

Staging,” on page 11 for more information.

Moving authorizations across stages is a key issue for an Identity Vault security model. eDirectoryTM

authorizations are assigned to individual objects or to a collection of objects. These authorizations

play an important role in the object security because they determine the permission to access the

object to which they have been assigned. eDirectory authorizations can be performed through

Access Control Lists (ACLs) or Security Equivalances/Exclude Roles. Drivers, jobs, RBEs, and so

on should have enough permissions to successfully perform the desired operations. See Chapter 2,

“Preparing for Staging,” on page 11 for more information.

1.2 Staging Use Cases

The staging discussion is centered on these scenarios:

New Deployment: New drivers and applications are developed during the development stage,

then they are tested and moved to the test setup. These applications are put together and moved

to the production setup.

Existing Deployment: You already have a development, test, and production setup ready and

you want to move a new policy from the development setup in the production setup.

Existing Deployment discussion is not scoped for the current version of this document.

Tabla de contenidos

Otros manuales de Software de Novell

Novell

Novell SERVER CONSOLIDATION MIGRATION TOOLKIT 1.2 - ADMINISTRATION GUIDE... Manual de instrucciones

Novell

Novell IDENTITY MANAGER 3.6.1 Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - ADMINISTRATION GUIDE... Guía del usuario

Novell

Novell ZENWORKS PATCH MANAGEMENT 6.4 - S Manual de instrucciones

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Guía rápida

Novell

Novell EDIRECTORY 8.8 SP2 - GUIDE 10-2007 Manual de usuario

Novell

Novell GROUPWISE 8 - DATABASES Manual de usuario

Novell

Novell ACCESS MANAGER 3.1 SP2 - J2EE AGENT GUIDE... Manual de usuario

Novell

Novell IDENTITY MANAGER DRIVER FOR ID PROVIDER 3.6.1 -... Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP1 - START UP GUIDE... Manual de usuario

Novell

Novell LOGIN SCRIPTS - 08-2008 Manual de usuario

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manual de funcionamiento

Novell

Novell ACCESS MANAGER 3.1 SP2 - SSL VPN USER GUIDE... Manual de usuario

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Manual de usuario

Novell

Novell LINUX ENTERPRISE 10 SP1 - LINUX AUDIT Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP1 - KDE... Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - KDE 17-03-2009 Manual de usuario

Novell

Novell XDASV2 - ADMINISTRATION GUIDE V1 Manual de instrucciones

Novell

Novell IDENTITY MANAGER 3.6.1 Guía de instalación

Novell

Novell OPEN ENTERPRISE SERVER CLUSTER SERVICES 1.8.2 -... Manual de usuario

Novell

Novell IDENTITY ASSURANCE SOLUTION 3.0.2 -... Manual de usuario

Novell

Novell EDIRECTORY 8.8 SP5 - TUNING GUIDE FOR UNIX... Guía de inicio rápido

Novell

Novell IDENTITY MANAGER 3.6.1 - UNDERSTANDING POLICIES... Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario

Lexmark

Lexmark Apps Manual de servicio