IDM User Management

The goal of this hands-on lab is to get you exposed to the basics operation for a User in IDM. Manual Operations for a User and Bulk Actions

Prerequisites

This hands-on lab assumes you have minimum programming experience.

Software Needed

Before you begin, you need to install the following software on your computer. 

• Sun Java System Identity Manager Installed Sun Java System Identity Manager 7.1 (download)
• Download and copy the  activation.jar   under the folder  C:\IDM\%tomcat%\webapps\idm\WEB-INF\lib
  

OS platforms you can use

• Windows

Change Log

• Sep. 17th labs  completed
  

Lab Exercises

• Exercise 0: Create User Accounts (10 minutes)
  
• Exercise 1: Login in the IDM Interfaces with the User Created (10 minutes)
  
• Exercise 2: Assign User Capabilities (15 Minutes)
  
• Exercise 3: Create Organizations (10 minutes)
  
• Exercise 4: Bulk Actions (15 minutes)
  

Exercise 1: Login in the IDM Interfaces with the User Created

                The goal of this exercise is to let you experience about how to login in the different IDM interfaces.

1. Login IDM Admin Interface
2. Login IDM User Interface
3. Login IDM Debug Interface

(0.1) Login  IDM Administrator  Interface

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

• Depending on the options that you selected during the Tomcat installation, the port may be different.

2. Enter the User ID and Password of a user that you created in the Creating User Account Section.

•  Use the account 99902

• Observe that you were not able to login because the user has no capabilities
  

•   Observe that you were not able to login because the user has no capabilities Screen with error                 

(0.2) Login IDM User Interface

1.   Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/User

• Depending on the options that you selected during the Tomcat installation, the port may be different.

2. Enter the User ID and Password of a user that you created in the Creating User Account Section.

•  Use the account 99902

•  Observe that the user login was succesfull. Remember  all users without capabilities assigned should be able to login on the User Interface

(0.3) Login IDM Debug Interface

          1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/Debug

• Depending on the options that you selected during the Tomcat installation, the port may be different.

2. Enter the User ID and Password of a user that you created in the Creating User Account Section.

•  Use the account 99902

• Observe that you were not able to login because the user has no capabilities
  

                                                                                                                             return to the top

Exercise 2: Assigning User Capabilities

                The goal of this exercise is assign to some of your user the capability to administrate account in IDM.

1. Assigning User Capabilities
   
2. Login Admin interface with the Administrative Account
   
3. Login Debug Interface with the Administrative Account
   

(0.1) Assigning User Capabilities

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

2. Enter the User ID and Password of a Configurator user.

•  Use the Configuratior account  (Login: Configurator    Password: Configurator)

• Once you assign a user any capability this is considered an Administrative User
  

3. Click the Account Tabs to access the Find User Page
• Enter the Account ID of the user 99902 and click
  
4. Click Search
   

5. User Account Search Results page appers .
6. Select the checkbox for the user 99902
7. Click Edit Button

1. The Edit User Page appears, select  the Security Tab
   
2. Assign the  Account Administrator Capability
3. Assigne the Top Organization
   
4. Click The Save Button
   

5. The Update Resource Acccount appears
6. Click Save Button

7. Click OK in the Workflow Status Page
• Observe this page shows if the capability was assigned correctly.
• At this time the user  99902 privileges change from Nmal User to Administrative User
  

(0.2) Login Admin interface with the Administrative Account

               1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

2. Enter the User ID and Password of a 99902 user.

• Once you assign a user any capability this is considered an Administrative User
• Observe the user 99902 icon color in red
  
• Observe the navigation tab menu depends of the capability
  

(0.3) Login Debug interface with the Administrative Account

               1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/debug

2. Enter the User ID and Password of a 99902 user.

• Observe the System Setting options enabled depends of the capability
  

                                                                                                                    return to the top

Exercise 3: Create Organizations

                The goal of this exercise is create some organization where the users from a company could be placed.

1. Create Organizations
   

(0.1) Create Organizations

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

2. Enter the User ID and Password

•  Use the Configuratior account  

3. Click the Account Tabs to access the List Account Page
4. Click  New Action  and New Organization drop down list
   

5. Enter America in the Name field
6. Scrolldown and Click Save Button.
   

7. Repeat the steps 3-4 to create the next organizations:
• Asia
• Africa
• Europe
• Australia

8. Your screen should look like this

                                                                                                                    return to the top

Exercise 4: BulkActions

                The goal of this exercise is to understand the functionality for the Bulk Action operations.

1. Disable,Enable and Delete Users
2. Create Users
3. Update Users
   

(0.1) Disable,Enable and Delete Users

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/
  

2. Enter the User ID and Password

•  Use the Configuratior account  

              3. Click the Accounts Tab to navigate to the Launch Bulk Actions  Page.

• Select Action  Disable
• Select Target Resource Accounts radiobutton All
• Select checkbox Target The Identity System Account
• Select Get Target Identity System User From List radiobutton
• Enter in the UserList TextArea the users to be disabled:
• 99901
• 99902
• 99903
  

               4. Click the Launch Button  to execute.

• See the image below for more details
  

   



              5. After you click Launch Button  a Launch Bulk Account Actions pager appears

• Observe that this screen show you the result of your Launch Action
• You can click on the link or download the CSV file to validate your results.         

              6. Your account should be disabled and your IDM screen will look like this.



              7. Repeat the steps 4-6 but selecting the Action Enable

              8. Your IDM screen will look like this.



              9. Repeat the steps 4-6 but selecting the Action Delete

              10. your IDM screen will look like this.

(0.2) Create Users

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

2. Enter the User ID and Password

•  Use the Configuratior account  

3. Download the Create Bulk Action File and copy to  C:\IDM\Labs  folder
   
• If the folder doesn't exist you can create it
  
4. Click  the Accounts  Tab and Select the Launch Bulk Actions page
5. Select from  Action drop-down list From Action List
   
6. Select the Allow resource account creates  checkbox
7. Under Action List file text  click the Browse Button and point to the C:\IDM\Labs\CreateUserBulkAction.txt
8. Click Launch Button
• You could be receiving an error like this if you didn't copy the Activation.jar file mentioned at the beginning of this lab.

• org.apache.jasper.JasperException: javax.servlet.ServletException: java.lang.NoClassDefFoundError: javax/activation/DataSource
  

9. Click  OK on the Launch Bulk Account Actions
   
• You can click the Click here to view the task status. or Click the Download CSV to see the results.
10. Your IDM screen will look like this.

                                                                                                                    return to the top

(0.3) Update Users

1. Open a Web browser and type the following address into the address bar:

• http://localhost:8080/idm/

2. Enter the User ID and Password

•  Use the Configuratior account  

3. Download the  Update Action File and copy to  C:\IDM\Labs  folder
   

• If the folder doesn't exist you can create it
  

4. Click  the Accounts  Tab and Select the Launch Bulk Actions page
5. Select from  Action drop-down list From Action List
   
6. Select the Allow resource account creates  checkbox
7. Under Action List file text  click the Browse Button and point to the C:\IDM\Labs\MoveOrgBulkAction.txt
8. Click Launch Button
<>
9. You can click the Click here to view the task status. or Click the Download CSV to see the results.

10. Your IDM screen will look like this.

                                                                                                                         return to the top