What Can You Use the Arcot Connector to Do?

After you have set up a connection to a CA Arcot WebFort endpoint, you can use CA Identity Manager to do the following tasks:

Note the following when deciding to implement the Arcot connector:

You cannot use CA Identity Manager to create ArcotOTP credentials.
Consider the functionality available in CA Identity Manager and CA AuthMinder Flow Manager (AFM) to determine which solution better suits your business use case.
For more information, see the CA AuthMinder Flow Manager (AFM) documentation.

After you have set up a connection to CA Arcot RegFort, you can use CA Identity Manager to do the following tasks:

Create certificate provisioning tasks for Arcot users directly or using an account template
Invalidate any pending certificate provisioning tasks of an Arcot user
View pending and completed certificate provisioning tasks
List the certificates that have been issued for an Arcot user, and the status of those certificates
Manage each certificate through its lifecycle. For example:
1. Create Certificate Provisioning Tasks (CPTs) to generate certificates for a new employee’s smartcard
2. When the CPT completed or the certificate is downloaded to the smartcard, the Life Cycle Management (LCM) shows that the certificate is ACTIVE.
3. When the validity of the certificate is finished, the certificate's status changes to EXPIRED.
4. If the employee resigns, then you can use the LCM action REVOKE, which changes the certificate's status to REVOKED.

The Arcot connection to CA Identity Manager has some limitations, including the following items:

You cannot use CA Identity Manager to do the following WebFort tasks:

Although the WebFort endpoint does not support user deletion, the Arcot connector can simulate user deletion.

Note: For more information about how the Arcot connector simulates account deletion, see How an Account Can Be Deleted.

You cannot use CA Identity Manager to do the following RegFort tasks:

The connector does not support the following features:

You cannot use text (or SMS) for self-service OTP task notifications through CA Identity Manager. You can use email notification only.