Identity Management Systems

I’ve spent the past couple of days looking at IBM Tivoli Identity Manager (ITIM). One of our customers uses this product and wants us to be able to work with it. It’s pretty cool, but somewhat painful to get running. It’s a Web-based application so, naturally, it’s built on top of IBM Websphere. It needs a database where it can store authoritative identity information so, naturally, it needs IBM DB2. There’s the actual code itself, of course. Then there’s the “Directory Integrator” which can interface with other directory systems. Then there are “adapters” – I was using the Active Directory Adapter. It runs as a service, communicating with ITIM over http, ideally, over https (SSL). If you want to do the latter, you’ll need to install a certificate authority so that you can generate certificates for ITIM and the adapter. I used the “Rapid Install” option and it was pretty good, but only after I gave up trying to install on anything other than drive C (in Windows).

WIth all these components, I was pleasantly surprised that everything pretty much worked as expected. I’ve become accustomed to large systems being inherently flaky. ITIM was solid.

It was also pretty easy to modify ITIM. I took the AD adapter and was, relatively quickly, able to extend it to support the additional attributes that we use in AD. I also modified some forms to support input/modification of these attributes. It only took me a couple of iterations to get right (mostly, due to my own bad typing but also due to some unexpected changes in letter case). We can now use ITIM to provision and maintain accounts in AD that are usable by UNIX, Linux and Mac OS X machines outfitted with our Likewise Enterprise agent.

ITIM and other Identity Management Systems (IdMS) are a good idea for any company with a large number of employees that need computer accounts on many different systems. Although our software allows non-Windows systems to directly authenticate against Active Directory and, thus, eliminates the need to use an IdMS to provision UNIX, Linux and Mac OS X machines, an IdMS can still provide value to organizations that use Likewise software. First, an IdMS provides an established workflow for provisioning new user accounts. This workflow can include approval processes for any granting of extended privileges. Second, an IdMS typically can synchronize accounts on a wide variety of systems. A user might have an AD account, for example, but also an Oracle database account or an SAP account. Although Likewise facilitates consolidation on a single, AD-based, identity many applications still require that users be provisioned in their own user stores. With Oracle, for example, you can tell it that a user will be authenticated, externally, with Kerberos, but you still have to provision the user in Oracle in order to identify the user as such. Finally, IdMS systems can integrate with other HR systems, for example PeopleSoft or similar systems. These features allow an IdMS to be used as the “authoritative” source of account information. When an employee joins or leaves a company, the IdMS can help provision or deprovision the user’s accounts, as necessary.

Although there is some overlap between commercial IdMS systems and our Likewise software (both can be used to accomplish “single username/password” for Windows and non-Windows computers), I think that the combination of products is a powerful combination. By allowing all non-Windows systems to authenticate directly against AD, we eliminate the need to use the IdMS to update large numbers of individual UNIX/Linux/Mac OS X machines. Likewise also adds group policy and single sign-on features that an IdMS does not provide. By using Likewise coupled with an IdMS (instead of manually provisioning users in AD), a company can enforce proper account management processes in AD and can also provision non-AD systems and applications.

97 Responses to “Identity Management Systems”

  1. fxqdmvtod wnyet drnihwc xvch aqxlsmsagjcijxq

  2. watche says:

    141427 430820Do you wear boxers or biefs? I wana bui em. 774387

  3. 138352 176420Some genuinely superb blog posts on this internet site , regards for contribution. 266991

  4. 748933 42336Truly fighter messages are supposed to amuse offer praise into the groom and bride. Initial time audio system watching over the top places ought to also remember you see, the senior guideline of the speaking, which is your specific person. greatest man speeches brother 437688

  5. 728568 417337An attention-grabbing dialogue is value comment. Im certain that its much better to write on this subject, towards the often be a taboo topic but typically persons are not sufficient to speak on such topics. To an additional location. Cheers 122502

  6. 344474 805784Very fascinating info !Perfect just what I was looking for! 904351

  7. facebook says:

    468709 554188I feel your suggestion would be helpful for me. I will let you know if its work for me too. Thank you for sharing this beautiful articles. thanks a good deal 634366

  8. 305092 895880I genuinely prize your function , Great post. 833239

  9. Georgia says:

    266537 187148Im glad to become a visitor in this pure web site, regards for this rare information! 432830

  10. mejaqq says:

    157816 211908Quite excellent publish, thanks a great deal for sharing. Do you happen to have an RSS feed I can subscribe to? 485317

  11. 545520 889717I truly delighted to find this internet website on bing, just what I was searching for : D too saved to fav. 777139

  12. 907739 132799Some truly wondrous function on behalf with the owner of this web site, perfectly fantastic subject material . 785616

  13. w88id says:

    216586 342626They call it the self-censor, just because youre too self-conscious of your writing, too judgmental. 142228

  14. 818955 306259Thank you for your quite very good data and respond to you. 835737

  15. 486121 246392This sort of considering develop change in an individuals llife, building our Chicago Pounds reduction going on a diet model are a wide actions toward producing the fact goal in mind. lose weight 167362

  16. 250356 43720I conceive this website has extremely amazing indited content material material posts . 824345

  17. 682175 111950Wow, superb blog format! How lengthy have you ever been running a blog for? 682492

  18. 648799 658004I want reading through and I conceive this internet site got some truly utilitarian stuff on it! . 66969

  19. 35042 292209Thanks for helping out, superb information. 923515

  20. 400219 421250A actually fascinating read, I might effectively not agree entirely, but you do make some quite legitimate factors. 472962

  21. 784590 789054Some genuinely wonderful weblog posts on this internet web site , regards for contribution. 334418

  22. 394385 131196Its like you read my mind! You appear to know a good deal about this, like you wrote the book in it or something. I think which you could do with several pics to drive the message home a bit, but other than that, this is amazing weblog. A great read. Ill definitely be back. 348886

  23. cialisis says:

    726520 105807I enjoy what you guys are up too. Such clever function and exposure! Maintain up the really great works guys Ive incorporated you guys to my own blogroll. 484840

  24. 475040 23170I see something really particular in this internet website . 24630

  25. influenceurs says:

    270760 867787Come across back yard garden unusual periods of ones Are normally Weight reduction and every 1 one may possibly be important. 1 way state could possibly be substantial squandering by way of the diet. lose weight 321034

  26. qiuqiu99 says:

    414248 444421Aw, it was a really very good post. In notion I would like to devote writing such as this furthermore,?C spending time and specific function to produce an excellent write-up?- nonetheless so what can I say?- I waste time alot and never at all seem to obtain 1 thing completed. 747469

  27. mejaqq says:

    256966 137800Have you noticed the news has changed its approach lately? What used to neve be brought up or discussed has changed. It is that time to chagnge our stance on this though. 765123

  28. 396318 412242Maintain websiteing stuff like this I truly am fond of it 790458

  29. dadu poker says:

    422962 936342Merely wanna input that you have a very good web site , I love the pattern it in fact stands out. 195482

  30. pasar poker says:

    232551 952424fantastic . Thanks for informations . Ill be back. Thanks again 955148

  31. musim qq says:

    184460 151380I visited a great deal of website but I conceive this 1 holds something particular in it in it 225858

  32. 536695 742208You need to join in a contest very first with the finest blogs on the internet. I most definitely will suggest this site! 205544

  33. 833291 423451Wonderful beat ! I wish to apprentice whilst you amend your site, how could i subscribe for a weblog internet site? The account aided me a acceptable deal. I had been a little bit acquainted of this your broadcast provided bright clear idea 519472

  34. wire qwest says:

    559522 876662Beging with the entire wales effectively before just about any planking. Our own wales can easily compilation of calculated forums those thickness analysts could be the related to some with the shell planking along with far more significant damage so that they project right after dark planking. planking 377515

  35. 552848 92627Quite exceptional data can be found on weblog . 495993

  36. 137496 432390Woh I love your posts , bookmarked ! My wife and i take concern along together with your last point. 289856

  37. 130353 724019This internet page is often a walk-through for all of the details it suited you with this and didnt know who to ask. Glimpse here, and youll definitely discover it. 411096

  38. rajaqq says:

    576962 428891Woh I enjoy your articles , saved to favorites ! . 810462

  39. 613109 214780An attention-grabbing discussion is worth comment. I believe that you ought to write much more on this matter, it wont be a taboo subject even so generally persons are not sufficient to talk on such topics. Towards the next. Cheers 246867

  40. Madilyn says:

    537217 792734As I website owner I feel the articles here is rattling superb , thanks for your efforts. 78658

  41. Sawyer says:

    582446 200584Undoubtedly,Chilly place! We stumbled on the cover and Im your own representative. limewire limewire 462604

  42. 441765 33080This will likely be a great site, may possibly you be interested in doing an interview about how you developed it? If so e-mail me! 258988

  43. 523023 179008Ive been absent for a although, but now I remember why I used to adore this internet site. Thank you, I will try and check back more often. How regularly you update your web site? 34188

  44. rajaqq says:

    692504 571440I certainly enjoyed the method which you explore your experience and perception of the region of interest 56824

  45. 738425 833505Um, think about adding pictures or much more spacing to your weblog entries to break up their chunky appear. 370487

  46. rajapoker88 says:

    877150 91573Hi, have you ever before asked yourself to write about Nintendo or PSP? 91994

  47. 623001 20679Many thanks I ought say, impressed together with your internet site. I will post this to my facebook wall. 18258

  48. 312031 19137Yay google is my king aided me to uncover this great website ! . 834041

  49. 421467 671102Hi there! Good post! Please do inform us when we could see a follow up! 631759

  50. Thank you ever so for you post.Thanks Again. Keep writing.

  51. Reishi says:

    I appreciate you sharing this blog article.Thanks Again. Want more.

  52. I cannot thank you enough for the post.Really looking forward to read more. Great.

  53. buy CBD says:

    Say, you got a nice article post.Really thank you! Cool.

  54. Great, thanks for sharing this blog article.Really looking forward to read more. Will read on…

  55. I truly appreciate this blog.Really thank you! Much obliged.

  56. Review says:

    Hey, thanks for the blog article. Cool.

  57. I cannot thank you enough for the article.Really thank you!

  58. Very good article post.Really thank you! Really Great.

  59. I value the blog post.Thanks Again. Great.

  60. Very good blog article.Much thanks again. Great.

  61. Hey, thanks for the blog post.Thanks Again. Really Great.

  62. wow, awesome blog.Much thanks again. Much obliged.

  63. Thanks for sharing, this is a fantastic article.Really thank you! Will read on…

  64. I loved your blog post.Much thanks again. Really Great.

  65. A big thank you for your blog.Much thanks again. Awesome.

  66. wow, awesome article post.Really looking forward to read more. Fantastic.

  67. juul weed says:

    Muchos Gracias for your blog article.Really thank you! Fantastic.

  68. Really appreciate you sharing this post.Much thanks again. Great.

  69. gclub says:

    Thank you for your blog.Thanks Again. Much obliged.

  70. Fantastic article.Much thanks again. Fantastic.

  71. Fantastic blog.Thanks Again. Much obliged.

  72. Thank you ever so for you blog article.Thanks Again. Really Great.

  73. classifieds says:

    Wow, great blog post.Really looking forward to read more. Much obliged.

  74. Crazy Bulk says:

    wow, awesome article post.Much thanks again. Really Cool.

  75. Really appreciate you sharing this post. Really Great.

  76. Im grateful for the blog post.Really looking forward to read more. Really Great.

  77. dildo asmr says:

    Really informative article post.Really looking forward to read more. Keep writing.

  78. sex toys says:

    Really informative article post.Really looking forward to read more.

  79. Major thanks for the blog post.Thanks Again. Fantastic.

  80. I truly appreciate this article.Really looking forward to read more. Keep writing.

  81. buy resurge says:

    This is one awesome blog article.Thanks Again. Really Cool.

  82. Great blog post.Thanks Again. Really Great.

  83. Really enjoyed this article post.Really thank you!

  84. Major thankies for the article post.Much thanks again.

  85. Thanks for sharing, this is a fantastic post.Much thanks again. Keep writing.

  86. Thanks for sharing, this is a fantastic post. Really Great.

  87. Download Mp3 says:

    Very good blog.Thanks Again. Really Great.

  88. Thanks for the post.Really thank you! Much obliged.

  89. Poker PKV says:

    Very informative post.Thanks Again. Will read on…

  90. CBD salve says:

    Say, you got a nice blog article.Much thanks again. Really Great.

  91. I appreciate you sharing this article.Really looking forward to read more. Great.

  92. This is one awesome post.Really thank you! Want more.

  93. I cannot thank you enough for the blog article. Much obliged.

  94. Very good blog article. Cool.

  95. Awesome blog article. Want more.

  96. I value the blog article.Really thank you!

Leave a Reply