Sunday, May 15, 2016

OIM Terminology

-------- OIM Terminology
Reconciliations - Process to sync up OIM with other system
                  Trusted Recon - Sync up against HR system [Identity]
                   Target Recon - Sync up against target system [Access]
Resource Object - Symbolic representation of Target system
SOA Composite - Approval workflow logic deployed in SOA
IT Resource - Target system connection info
Adapter - Java method symbolic representation
Provisioning Workflow - Set of task flow to manage access in target system
Process Form - Place holder form used by provisioning task
Lookup - Place holder for any config used by OIM code
Catalog - Name itself suggest. It contains all available target so user can pick and request
Email Template - Contains email template used by OIM to send communication
Schedule Task - Job running on period basic. Like recon process.
Policy
             Approval Policy - Contains Application vs SOA Composite mapping
             Access Policy - Contains rule for automatic giving target access to any user


----------- Commonly used Configuration

OIM is used for managing Identity and Access. So we have to onboard users and target system inside OIM before managing the Access.

User On-boarding - Process is called Trusted Reconciliation. Typically we create a schedule job to pull delta from HR system and sync OIM identity.

Application on-boarding - Multiple steps need to follow for boarding new target system in OIM.
                  Create Resource Object [Symbolic representation of target system]
                  Create IT Resource [target system connection parameter]
                  Configure Provisioning Workflow [Task flow to manage access]
                  Configure Process Form
                  Crete Application Instance and publish in catalog

Application Recon - Also called as Target Reconciliations. Typically we create a schedule job to pull delta from target system and sync OIM access.


1 comment:

  1. thank you for providing the basic terminologies.

    ReplyDelete