Is it possible to create additional IGAXpress admin users with only application access?

Products

• CA Identity Suite

Issue/Introduction

Security policies at some sites do not allow Linux access to other IGA Administrators.  There can be a need to create another "Web access only" user. 

Environment

V15

 

Resolution

There are two IGAXpress authentication modes.

1. system authentication: The "igx" user credentials are tied to the linux system credentials.
2. application authentication. Linux-igx user can set the "igx" credentials which are different from the system credentials.

Application Authentication

The application authentication mechanism can be extended to include other users.

$> igactl passwdxp
This command can be modified to add/reset/delete credentials for multiple users.

Note: Only the linux-igx user will be able to add/modify/delete the user credentials.

The browser uses application authentication.  File system access requires system credentials. By default we use system-credentials (like vApp does). So in many cases, if you don't need multiple users as we do by default, you do not need to use application authentication.