ACS with Tivoli Identity Manager

Has anyone implemented ACS with ITIM? It was press released almost a year ago and I cannot find any technical documentation to find out how it integrates. What I need to find out is: Does the ACS server use ITIM as a external database for user auth? Or do both products need to backend into the same LDAP dir for user/pass info?

Yes, we have. ITIM has develped an ITIM ACS agent for Cisco ACS integration. The ITIM ACS Agent is installed on the ACS server and it communicates with Cisco ACS application through Cisco ACS available API. Through the ITIM agent, TIM can creat, delete and modify ACS user's account. No, Cisco ACS server can not use ITIM database as an external for user auth.

Similar Messages

User Profile provising by Tivoli identity manager

Is it possible provisioning User Profile Services by Tivoli Identity Manager ITIM

HI,By default share point provisions UPS by the FIM service.This is the tool configured in sharepoint when we run the UPS and Synchronisation service.
http://expertsharepoint.blogspot.de/2014/03/user-profile-service-and-user-profile.html
Anil Avula[Partner,MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

Java class integration with Oracle Identity Manager 9.1.0.2

Hello Friends,
I have a java class that is responsible for sending notifications, my question is how do the relationship of this class with the Oracle Identity Manager 9.1.0.2 so you can take the class and notify users when an application is approved or rejected.
Any recommendation for this process.
Thanks for the support
Edited by: JLK on Jun 12, 2012 5:20 PM

Hi
Java class integration with OIM happen through concept of adapters. You can go through OIM documentation of how to create adapters.
In your case you should create a process task adapetrs adn attach it on the Approved response code in your approval process.
Desingn Console --> Process management --> Process definition --> <Apprlication Process Ex: AD User>.
Alternatively you can also send notification using OIM OOTB email templates.
Regards
user12841694

RMAN integrated with Tivoli Storage Manager

Environment
===========
Two Node RAC Production DBs on 10.2.0.4
Platform : Solaris
RMAN is the only backup tool i've ever worked with. I've come across OTN articles which discuss TSM along with RMAN. Is there any advantage at all in using TSM with RMAN ? Or, Is it just marketing gimmick by IBM?

Our strategy:
1--Monday ------------------->Level 0 backup (1:00am)
2--Tuesday----->     Level1
3--Wednesday----->     Level1
4--Thursday------------------>Level 0 backup (1:00am)
5--Friday----->     Level1
6--Saturday----->     Level1
0--Sunday ----->     Level1Our RMAN backup pieces got to an NFS mount . Every monday morning the Level 0 backup is copied to Tape by Sysadmins and kept for 3 months. So, where does Tivoli storage manager come into picture ? Does TSM do copying the backup pieces from Disk to Tape part ?

Integration of MS Active directory with SAP Identity management

Hello
I am implementing SAP identity Management 7.1with external tools MS active Directory with Single sign on using SAP IDM . Is there any documentation as to how do I connect SAP IDM with MS AD with the roles and their user provisioning process .
Also does anyone have a architectural work flow template on this process .

Hi
I guess, using VDS you can achive this. ref the LDAP connection part.
https://websmp203.sap-ag.de/~sapidb/011000358700001449652008E
https://www.sdn.sap.com/irj/sdn/nw-identitymanagement
Regards
Shridhar Gowda

Hyperion integration with Tivoli Access Manager

Hello All:
Does Hyperion supports using pre-authenticated users from IBM Tivoli Access Manager. Please can you point me to any documentation explaining the integration procedure.
TIA.

Suggest you read sections 2,3,4 of the below document:
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
It doesn't come out and say that this type of agent is supported -- you can potentially log a case with Oracle and they may be able to answer you however as it's not documented I would suggest it's not supported.
If you decided to go forward with this then you need to find someone else who is using it successfully and ask them how it is working out.
Presuming they didn't change too much from 9.3.1 to 11.1 (9.5) then you will find many many issues with SSO working.
IT saving a user a login box or two and making the application non-usable just isn't a good direction to go.
John

How to use Virsa with SAP Identity Management?

I have been assigned to handle my company's SAP Identity Management and
I am asked to use Virsa control.
I am not quite clear about the relationship between the 2 SAP products.
Would you please help? Thanks!

Jennifer,
There is no product called virsa control by SAP. Virsa was a small company which made different solution for SOX compliance. It was acquired by SAP. If you are talking about SAP BusinessObjects Access Control 5.3 then see the links below to understand the integration between SAP IdM and SAP AC 5.3.
https://www.sdn.sap.com//irj/sdn/go/portal/prtroot/docs/library/uuid/b0aafd33-e662-2a10-a197-dd3137f7f7e0
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b0da2dba-0480-2b10-a7ae-f055ab6e9355
Regards,
Alpesh

Identity manager rcu failure

Hi,
I'm attempting to learn about Identity Manager, but I can't get the application installed.
The error I'm seeing when running RCU with the Identity Manager repository selected is: RCU-6130/RCU-6136: Error while trying to execute SQLPlus action.
From the rcu.log the following errors can be found:
2012-07-12 20:58:48.918 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JavaAction::perform: JavaAction command=oracle.ias.version.SchemaVersionUtil:utilSetComponentValid
2012-07-12 20:58:48.918 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JavaAction::perform: JavaAction method=utilSetComponentValid
2012-07-12 20:58:48.968 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for SOA Infrastructure : 10145 milliseconds
2012-07-12 20:58:48.968 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Oracle Identity Manager
2012-07-12 20:58:48.968 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JavaAction::perform: JavaAction command=oracle.ias.version.SchemaVersionUtil:utilCreateRegistryEntry
2012-07-12 20:58:48.968 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JavaAction::perform: JavaAction method=utilCreateRegistryEntry
2012-07-12 20:58:48.968 NOTIFICATION rcu: oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine::connect: Connecting to database: user:SYS, role:SYSDBA, connectString:(description=(address=(host=192.168.56.3)(protocol=tcp)(port=1521))(connect_data=(service_name=ORCL)(server=dedicated)))
2012-07-12 20:58:49.018 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JDBCAction::perform: m_bean.getResetSession() = false
2012-07-12 20:58:49.018 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JDBCAction::perform: m_bean.getConnectAsOwner() = false
2012-07-12 20:58:49.018 NOTIFICATION rcu: oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine::connect: Connecting to database: user:SYS, role:SYSDBA, connectString:(description=(address=(host=192.168.56.3)(protocol=tcp)(port=1521))(connect_data=(service_name=ORCL)(server=dedicated)))
2012-07-12 20:58:49.068 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JDBCAction::perform: current user=SYS
2012-07-12 20:58:49.068 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JDBCAction::perform: Performing JDBCScript Action Command: C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\/rcu/integration//oim/sql/oim_user.sql CMDLINE Parameters Length: 5
2012-07-12 20:58:49.068 NOTIFICATION rcu: oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine::parseNexecuteScript: ParseNexecute Script: C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\/rcu/integration//oim/sql/oim_user.sql
2012-07-12 20:58:49.238 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.JDBCAction::perform: **** Sql script DONE****
2012-07-12 20:58:49.248 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.AbstractCompTask::execute: ValidIf result was false. Skipping Action: C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\/rcu/integration//oim/sql/param.sql
2012-07-12 20:58:49.248 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.action.SQLPlusAction::perform: paramString = 'DEV2_OIM'
2012-07-12 20:58:49.379 ERROR rcu: oracle.sysman.assistants.rcu.backend.action.SQLPlusAction::perform: Error initializing SQLPlusEngine:
java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: Error initializing sqlplus.
     at oracle.sysman.assistants.common.dbutil.sqlplus.SQLPlusEngine.setDefaultEngineSettings(SQLPlusEngine.java:2144)
     at oracle.sysman.assistants.common.dbutil.sqlplus.SQLPlusEngine.initialize(SQLPlusEngine.java:352)
     at oracle.sysman.assistants.rcu.backend.action.SQLPlusAction.perform(SQLPlusAction.java:200)
     at oracle.sysman.assistants.rcu.backend.task.AbstractCompTask.execute(AbstractCompTask.java:243)
     at oracle.sysman.assistants.rcu.backend.task.ActualTask.run(TaskRunner.java:306)
     at java.lang.Thread.run(Thread.java:619)
2012-07-12 20:58:49.379 ERROR rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: RCU Operation Failed
oracle.sysman.assistants.common.task.TaskExecutionException: RCU-6136:Error while trying to execute SQLPlus action.
     at oracle.sysman.assistants.rcu.backend.task.AbstractCompTask.execute(AbstractCompTask.java:300)
     at oracle.sysman.assistants.rcu.backend.task.ActualTask.run(TaskRunner.java:306)
     at java.lang.Thread.run(Thread.java:619)
Caused by: oracle.sysman.assistants.common.task.ActionFailedException: RCU-6136:Error while trying to execute SQLPlus action.
     at oracle.sysman.assistants.rcu.backend.action.SQLPlusAction.perform(SQLPlusAction.java:211)
     at oracle.sysman.assistants.rcu.backend.task.AbstractCompTask.execute(AbstractCompTask.java:243)
     ... 2 more
Caused by: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: java.io.IOException: Error initializing sqlplus.
     at oracle.sysman.assistants.common.dbutil.sqlplus.SQLPlusEngine.setDefaultEngineSettings(SQLPlusEngine.java:2144)
     at oracle.sysman.assistants.common.dbutil.sqlplus.SQLPlusEngine.initialize(SQLPlusEngine.java:352)
     at oracle.sysman.assistants.rcu.backend.action.SQLPlusAction.perform(SQLPlusAction.java:200)
     ... 3 more
2012-07-12 20:58:49.379 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Execute post create operations
2012-07-12 20:58:49.379 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.CustomCompManager::getActionList: CustomCompManager.getActionList: CUSTOM_COMP_POSTLOAD_CLEANUP
2012-07-12 20:58:49.379 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Execute post create operations : 0 milliseconds
2012-07-12 20:59:00.164 NOTIFICATION rcu: oracle.sysman.assistants.rcu.ui.InteractiveRCUModel::showCompletionMessage: Repository Creation Utility: Create - Completion Summary
Database details:
Host Name               : 192.168.56.3
Port                    : 1521
Service Name               : ORCL
Connected As               : SYS
Prefix for (prefixable) Schema Owners : DEV2
RCU Logfile               : C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\rcu\log\logdir.2012-07-12_20-57\rcu.log
RCU Checkpoint Object               : C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\/rcu/log\RCUCheckpointObj
Component schemas created:
Component               Status     Logfile
Metadata Services          Success     C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\rcu\log\logdir.2012-07-12_20-57\mds.log
Oracle Identity Manager          Failed     C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\rcu\log\logdir.2012-07-12_20-57\oim.log
SOA Infrastructure          Success     C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\rcu\log\logdir.2012-07-12_20-57\soainfra.log
User Messaging Service          Success     C:\ofm_rcu_win32_11.1.1.3.3_disk1_1of1\rcuHome\rcu\log\logdir.2012-07-12_20-57\orasdpm.log
2012-07-12 21:08:54.959 NOTIFICATION rcu: oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine::connect: Connecting to database: user:SYS, role:SYSDBA, connectString:(description=(address=(host=192.168.56.3)(protocol=tcp)(port=1521))(connect_data=(service_name=ORCL)(server=dedicated)))
2012-07-12 21:08:54.969 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Oracle Identity Manager
2012-07-12 21:08:54.969 ERROR rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: RCU Operation Failed
java.lang.NullPointerException
     at oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine.executeQuery(JDBCEngine.java:943)
     at oracle.sysman.assistants.common.dbutil.jdbc.JDBCEngine.executeQuery(JDBCEngine.java:727)
     at oracle.sysman.assistants.rcu.backend.validation.StepValidator.executeQuery(StepValidator.java:414)
     at oracle.sysman.assistants.rcu.backend.task.ComponentTask.filterTablespacesToDrop(ComponentTask.java:585)
     at oracle.sysman.assistants.rcu.backend.task.ComponentTask.getDropTbsActionList(ComponentTask.java:330)
     at oracle.sysman.assistants.rcu.backend.task.ComponentTask.initActions(ComponentTask.java:206)
     at oracle.sysman.assistants.rcu.backend.task.AbstractCompTask.execute(AbstractCompTask.java:202)
     at oracle.sysman.assistants.rcu.backend.task.ActualTask.run(TaskRunner.java:306)
     at java.lang.Thread.run(Thread.java:619)
Environment:
Windows 2008 x64 server for database host, 11.2.0.1.0 64bit db
Target ident manager server: windows 2003 32bit (I heard 32bit installs are easier)
Running the RCU utility from a 2008 or a 2003 host makes no difference, fails the same way.
From the documents here: http://docs.oracle.com/cd/E23943_01/install.1111/e10033/configone.htm
Section 4.2.2 indicates a few parameters in the db must be set, so here are the current values for my db:
Total System Global Area 2104479744 bytes
Fixed Size 2177368 bytes
Variable Size 1476396712 bytes
Database Buffers 620756992 bytes
Redo Buffers 5148672 bytes
Database mounted.
Database opened.
SQL> show parameter open_cursors;
NAME TYPE VALUE
open_cursors integer 900
SQL> show parameter aq_tm_processes;
NAME TYPE VALUE
aq_tm_processes integer 2
SQL> show parameter db_cache_size;
NAME TYPE VALUE
db_cache_size big integer 240M
SQL> show parameter java_pool_size;
NAME TYPE VALUE
java_pool_size big integer 224M
SQL> show parameter shared_pool_size;
NAME TYPE VALUE
shared_pool_size big integer 272M
SQL> show parameter open_cursors;
NAME TYPE VALUE
open_cursors integer 900
I selected utf-8 during the db install as well.
I selected automated memory management, so alot of the memory values above were set to 0. I set the just to be sure..
I'm at a loss for what to check next.. Last time I tried installing this product only way i could get rcu to work was from a linux host; but then the install would fail.
The db is running in a virtual box vm, i think I gave it 5 gigs of memory. Could that be part of the problem? I'm looking for any directions or ideas, I havnt even gotten to installing the product yet; seems like a daunting task.
Thanks!!

you can try this
copy msvcr71.dll from (rcu-install-dir)\jdk\bin to: and C:\Windows\SysWOW64
and, If you are using ‘Oracle Database XE’ you must set the RCU_JDBC_TRIM_BLOCKS environment variable to TRUE, before the installation
To do so: Right click on ‘My Computer’->Advanced Tab->Click on ‘Environment Variables’->Under ‘System Variables’ click ‘New’->
Name: RCU_JDBC_TRIM_BLOCKS, Value: TRUE

AAMEE + Tivoli Endpoint Manager/BigFix

Has anyone successfully used an AAMEE created Adobe CS6 package in combination with Tivoli Endpoint Manager (formerly known as BigFix)?

Hi,
This is not a Product we have personally tested although I am aware that customers have used it succesfully in the past. From what I remember there was a 2gb restriction on package sizes but that may now have been removed by the vendor.
AAMEE created packages are designed to be used with 3rd party deployments tools and the msi and pkg files it produces are pretty standard. We would be interested to see how you get on with your testing and if there is any help we can provide on our side then just let us know.
Cheers
Karl Gibson
CS Enterprise Systems Engineer

Active Directory, GRC, and Identity Management

I had originally posted this in the Security forum, but was directed here:
A client I am working at would like to explore using Active Directory groups to assign SAP roles to users, both portal roles and ABAP roles. They are currently using Microsoft AD. However they have a requirement to use GRC Access Controls (v5.2) to assist with role maintenace and assignment for SOX compliance. I have been told that the Identity Management product can assist with integrating GRC and AD that will still allow for SOD checking/SOX compliance while role assignments can take place in AD.
Does anybody have experience with using Identity Management either with or without GRC? Does in work with Microsoft AD or is it is own AD product? What was your experience with it?
Are there any other products that can be recommended that will allow for integration between GRC Access Controls and Microsoft AD?
Steve

Hi Steve,
We integrated SiteMinder(eTrust) from CA with the Portal and it is pretty good and stable.
The one thing i like with SiteMinder is they are pretty stable and once it is configured the maintenance is very less and it is very stable also.
Also, they provide integrations with major webservers and application servers.
Cheers, Nag

BPC authentication via Tivoli Access Manager

Hello experts,
I'm now investigating BPC authentication mechanism with third vendor authentication software.
Is it possible to login to BPC v7.5 MS version via Tivoli Access Manager with 'Reverse Proxy' ?
And can BPC get a login-user information as a http-header from Tivoli Access Manager at this time ?
If the above situation is possible, can BPC utilize BO enterprise authentication with Tivoli Access Manager ?
Best regards,
Tatsuo Oba

SAP BOPC can use Reverse Proxy.
I'm not sure how you want to use Tivoli Access Manager with SAP BOPC?
It is very interesting to know also the reason you woudl like to use SAP BOPC in this way.
It can be a very nice case study.
BPC can not get information like an HTTP header and something like that it will be unsafe from security point of view.
Regarding your question:
BPC to utilize CMS authentication with Tivoli Access Manager
I think you have to provide more information? Why do I need Tivoli Access Manager to access BPC or to do authentication to CMS.
I have to mention I don't know how it is working Tivoli Access Manager and because of that I'm asking you to provide more information.
Regards
Sorin Radulescu

Identity Management 8.0 - SAP Provisioning Forms UI display

Hi guys!
I'm trying to setup a new environment with SAP Identity Management 8.0, using the standard SAP Provisioning Framework.
I've already followed all install guide and configuration steps, but the Web forms for default provisioning tasks are not appearing on the Self Service tab or Manage tab. I've already tried to modify the forms to let anonymous and everyone to execute the form, but no clue.
The tabs appears OK, but no tasks are available to choose
We are using the lastest patches available until today.
Any help would be appreciated.

Hi Eduardo,
Please go to the forms and right click over the Identity folder.
The option Show Folder in User Interface should be selected
If this doesn't help please try restarting the JMX and check your Datasource.
Regards,
Todor

Oracle Identity Manager Customization

Hi to all. Working with Oracle Identity Manager 11g, I have a simple need. Please let me describe my scenario. I have one user, say Joseph who has 2 or many accounts of a resource, namely "BADGE". In my application, one user may have one or more badges. When Joseph tries to submit a ModifyProvisionedResource request for the BADGE resource type, the system shows a table for the selection of one among the BADGE resources. This table has 3 columns: Resource, UserID, Description.
I simply need to add one column to this table to show a custom attribute of the BADGE resource.
Which are the steps to follow to do this?
Thank you in advance,
Giuseppe.

Hi,
As martin said its a custom interface.You will have to extend ManageAttestationTask class. You need to override few method particularly populateTableData and populateTableDataForRequestDetails methods.
I would recommend this approach until you are every much familier with struts development because if you messed up attestation won't work and more over oracle dosn't support any action class customizations.
Regards
Nitesh

NW04 EP60 SSO with Tivoli

Hi there,
Is there any how-to guide or technical documentation on how to setup and configure NW04 EP6.0 on Web AS 6.40 for SSO with Tivoli Access Manager? I was only able to get IBM information but its based on EP5.0.
Thanks.

Hi Torsten,
From the document - In 2.c, what web appliation or template you use to add logon module HeaderVariableLoginModule?
2. Adjust the J2EE web applicationu2019s login module stack by adding in the HeaderVariableLoginModule:
a. In the Visual Administrator, choose Server (name) - Services - Security Provider.
b. Select Policy Configurations - Authentication.
c. Select the J2EE web application that is to be configured to support header variable authentication. Alternatively, an authentication template used by the J2EE Web application may be selected (for example, SAP NetWeaver EP Core uses the ticket authentication template). Modifying an authentication template will affect every application configured to use the template.
d. Add the login module HeaderVariableLoginModule to the login module stack by clicking on Add New and selecting HeaderVariableLoginModule.
Thanks.
Ed

ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?

OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.

ACS with Tivoli Identity Manager

Similar Messages

Maybe you are looking for