Novell IDENTITY MANAGER 3.6.1, Руководство по установке

Страница: 16 / 104

16 Identity Manager 3.6.1 Installation Guide
no
vd
ocx
(e
n)
17
Sep
te
m
be
r 20
09
2.1.1 Defining Current Business Processes
Identity Manager automates business processes to easily manage identities in your environment. If
you do not know what the current business processes are, you cannot design an Identity Manager
solution that automates those processes. You can use the Architecture mode of Designer to capture
your current business processes and display them graphically. For more information, see the
“
Architect Mode ” in Designer 3.5 for Identity Manager 3.6 Administration Guide .
Here are a few business process examples:
Š When an employee is terminated, the user account in the e-mail system is deleted, but the
user’s account in all other systems is disabled, not deleted.
Š
The format for a user’s e-mail address.
Š
What systems or resources sales employees can access.
Š
What systems or resources managers can access.
Š
What systems generate new accounts? Is it the human resource system or is it through a
workflow request?
Š A password policy for the company that defines how often a password changes, how complex
the password is, and which systems are synchronizing the password.
As you define your business processes, use the following list of items to help you understand all of
the processes:
Š
Define or clarify the current business issues.
Š Determine what initiatives are required to address these issues.
Š
Determine which services and systems are affected by these initiatives.
This step allows you to create a high-level overview of what your business is currently doing and
what processes need to be improved. For example,
Figure 2-1 is from Designer it shows that new
user accounts are generated from the PeopleSoft* system. They are synchronized into the Identity
Vault and then synchronized into Lotus Notes* and Active Directory*. Passwords are being
synchronized between Active Directory and the Identity Vault. Accounts are synchronizing into the
Notes system, but no accounts are synchronizing back to the Identity Vault.