Identity Manager 4.5: Customization and Roles

This NetIQ Identity Manager helps you build an intelligent identity management framework to service your enterprise - both inside the firewall and into the cloud. Identity Manager centralizes the administration of user access and ensures that every user has one identity from your physical and virtual networks to the cloud.

Note: This course teaches the extended functionality of IDM 4.5.  By the end of this course, students will be able to: Develop Advanced Policies,Implement Advanced Drivers, Create Advanced Entitlements, Configure Custom Workflows, Manage Reports, Define and Create Roles, Customize the User App and Manage Packages

This course is for anyone managing identity in the enterprise using the NetIQ Identity Manager 4.5 family of products including roles provisioning.


You should have taken NetIQ Identity Manager 4.5 courses N3127 and N3128 before taking this course.

För att alltid hålla en hög kvalitet på våra teknikkurser använder vi både engelsk- och svensktalande experter som kursledare.


SECTION 1- Analyzer

Configuring Analyzer

  • Configuring the Identity Vault Connection
  •  Configuring the Connected System Connection
  • Run Analysis and Reporting
  • Create Custom Metric for eMail to Clean Data
  • Creating Cleaner Script for eMail Address
  • Advanced Metrics – Applying Cleaner Script Using Two Columns
  • Matching Profiles

SECTION 2 - Advanced Package Management

  • Create a New Development Identity Vault
  • Copy Default
  • Customize Prompts for Copied Package
  • Customize Filters for Copied Package
  • Customize GCVs for the Copied Package
  • Customize Policies for the Copied Package
  • Publish the Package for Download
  • Create New Category and Group
  • Create Category and Group through the Driver
  • How to add Optional Packages

SECTION 3 - Driver Customization

  • Intro to Policy
  • Creating a New Policy
  • Formatting Data

SECTION 4 - Default Password with Delimited Text

  • Modify Existing Default Policy
  • Testing your Objective
  • Change the CN Name

SECTION 5 - eDirectory Group Policy

  • Configure Finance Group Policy
  • Reciprocal Attribute Mapping

SECTION 6 - Creating Custom E-Mail to Manager

  • Create a New E-Mail Template
  •  Use the Null Driver
  • Add Template to Policy using Libraries
  • Receiving Notification E-Mail

SECTION 7 - Hierarchical placement in Downstream Applications

  • Add BusinessCategory to Filter
  • Choosing Standard or If then Else Methods
  • Customize Placement Policy Using Standard Policy Builder
  •  Customize Placement Policy Using if then else

SECTION 8 - Using XPath, ECMAScript, and Regular Expressions

  • Create a Null
  •  Capture the Structured Attribute Data with DS Trace
  • Create ECMAScript to Validate Zip Code
  • Create Policy for Postal Address Formatting
  • Modify User’s Postal Address to Test

SECTION 9 - Entitlements – Initial Setup

  • Create Driver using Loopback Driver Configuration
  • Review Driver Configuration
  • Review Filter Resource for the User
  • Review Policies to Maintain Group Membership on Entitlement
  • Deploy the Driver
  •  Create Test Data

SECTION 10 - Use Entitlement in a Rule with Entitlement Service Driver

  • Configuring Role-Based
  • Review RBPM Entitlements Service Driver Filter
  • Configure the Policy Rule to Assign and Revoke Entitlement
  • Deploy the Entitlement Service Driver and Role-Based Entitlement Policies
  • Reevaluate Membership for Entitlement Service Driver
  • Change User Objects to Add User to a Group
  • Change a User Object to Remove User from a Group

SECTION 11 - Creating a Designer Workflow Perspective

  • Create Workflow Perspective
  • Enable Project Checker for Debugging Workflows
  • Save Workflow Perspective

SECTION 12 - Use Entitlement in a Workflow with the User Application Driver

  • Create a Provisioning Request Definition (PRD) in Designer
  • Request Membership in a Group by Starting a Workflow Request
  • Approve a Workflow Request
  • Create a PRD in Designer to Revoke the Entitlement
  • Test the Revoking of the Entitlement

SECTION 13 - Convert Driver Entitlements to RBPM 4.5 Resource Model

  • Add Policy to Create Resource Configuration Object
  • Create GCVs to Control Driver Configuration
  • Create Mapping Table(s) for Localization
  • Deploy and Start (Restart) the Driver

SECTION 14 - Entitlements – Create and Assign Resources using Permission On-Boarding and Collection

  • Add Active Directory Entitlement Package to Driver
  • Test Active Directory Resources from User Application
  • Test Active Directory Resources from the Application Side (Publisher)
  • Using Static Resources for Assignment (Subscriber or Publisher
  • Loading Custom Entitlements Through a CSV File

SECTION 15-1 - Field Options And Script Examples in Workflow

  • Create a Testing Provisioning Category
  • Create Template Using Single Approval Template
  • Define the Flow Activities and Links
  • Override The Resource Name
  • Change Single Approval Properties
  • Deploy Your Template and DAL Changes

SECTION 15-2 - Create Form Fields Test Workflow

  • Create Request Definition
  • Add Fields to Request Form
  • Add Fields to Approval Forms
  • Test the Workflow

SECTION 15-3 - Create a Email Address Query Workflow

  • Create the Query Object in the DAL
  • Create the Request Definition
  • Add Field to Request Form
  • Add Events to Field
  • Deploy and Test Your Workflow

SECTION 15-4 - Create a Custom Validation Workflow

  •  Create the Request Definition
  • Add a Resource Name Override to Start Activity
  • Add Field to Request Form with Validation Mask
  •  Deploy and Test with Mask Only
  • Add Script to Display a More “friendly” Error Message
  • Deploy and Test with Error Message Script

SECTION 15-5 - Use Java to Format Date and Hide Field Until Form Claimed

  • Format a Date Using the Java API
  • Set Field to Appear After the Approval is Claimed
  • Deploy and Test Your Workflow

SECTION 16 - Using External Scripts in Workflow Forms

  • Create a PRD Using External Scripts
  • Add Fields to Request Form
  • Test the New User Interface

SECTION 17 - Using jQuery for a Different User Interface

  • Reading the Source to Find What to Replace
  • Create a PRD with jQuery Examples
  • Test the New User Interface

SECTION 18 - Create a Request Device Workflow

  • Create User Entity in the DAL
  • Create a List for the Hardware Type

SECTION 18-2 - Request Cell Phone

  • Create the workflow using an approval template
  • Change the Request Form
  • Change the Approval Form
  • Create a new approval form for cell phone approval
  • Change the flow diagram for Phone Entry processing
  • Deploy and test your Request


  • Add the laptop form to the workflow
  • Change the flow to include the Laptop entry
  • Deploy and test your new workflow

SECTION 18-4 - Hallenge

SECTION 19 - Create a Custom Role Approval Workflow

  •  Create a Role Approval From Default Approval
  • Delete the Activities
  • Deploy Role Approval Definition

SECTION 20 - Branding the IDM 4.5 Reports

  • Run a Report to View the Current Header and

SECTION 21 - Customize the IDM 4.5 Role Member Report

  •   Exercise 21-1                  Extract the Source Code
  •   Exercise 21-2                  Change the Report Title and
  •   Exercise 21-3                  Add a New Column to the Report
  •   Exercise 21-4                  Build and Deploy your Customized
  •   Exercise 21-5                  Test Your Changes by Running the Customized Report

APPENDIX A - Create a Request Device Workflow – Advanced

Create Hardware Request Resource in User Application

  • Hardware Request Workflow
  • Create the Provisioning Request Definition in Designer
  • Configure the Integration Activity to Grant Resource
  • Test the Workflow
  • Fix the Issue Found with Setting Workflow Status
  • Retest the Changes

APPENDIX B - Create a Custom Resource Approval Workflow

Create Resource Approval Provision Request Definition

  • Create a Resource Approval From Default Approval
  • Delete the Activities
  • Deploy Resource Approval Definition


Add Custom Approval on Revoke of Resource

Test Resource Revoke Process with Approval

Rights Issue to Revoke Hardware Request Resource



Addskills erbjuder mycket mer än traditionell klassrumsutbildning. Se vilka utbildningsformer som passar just dig!

Addskills kunskapsbank

Ta del av intressanta artiklar, webinars och filmade seminarier.

Anpassad företagsutbildning

Behöver du en utbildning som är anpassad till ditt företags behov? Läs mer om våra anpassade företagsutbildningar.

Om kursen

Pris: 41 450,00 kr

exklusive moms

Längd 5 dagar
Kurskod N3129

Kursen hålls på begäran

Kontakta oss för mer information.

Telefon: 08-440 11 00