IM provisioning administrator account passwords

Products

• CA Identity Manager

Issue/Introduction

Can you change the password of Identity Manager's public user, provisioning inbound administrator and outbound administrator accounts?

 

 

 

 

 

 

Environment

Release:
Component: IDMGR 12.x

Resolution

By default you do not provide passwords for the public user, provisioning inbound administrator and outbound administrator accounts when creating them in Identity Manager using the management console.These users are not used to perform tasks, they hold the respective administration roles in Identity Manager required to grant them access to perform tasks, however, they are not authenticated to actually perform these tasks.

 

Therefore when a provisioning update is received by Identity Manager it will look to the inbound administrator role that grants access to the necessary provisioning task (such as Provisioning Create User or Provisioning Modify User) to carry out the task. The task will be carried out by that user but without authenticating the user. It will be carried out in the same session that received the request.

 

Therefore, the passwords for these accounts are not needed for Identity Manager and are allowed to change freely without any need to make updates to Identity Manager to know of these password changes.