|
|
|
Use this tab to enable Smart Provisioning functionality and set global defaults for suggested roles and compliance checking across all tasks.
Note: If any task must be configured differently than the global settings, you can adjust the settings at the task level. Task-level settings override global settings.
Enables Smart Provisioning functionality for the Identity Manager Environment.
Note: Smart Provisioning can be disabled even though a connection with CA RCM exists.
Define configuration settings that apply to all tabs that support Smart Provisioning functionality.
You can override these global settings for certain tabs by specifying tab-level configuration when you modify the tab settings.
Defines the search screen used for the role suggest feature.
Determines whether the Advanced Suggestion Configuration section appears on the results page of the role suggest feature, after a search is performed.
The Advanced Suggestion Configuration section allows administrators to enter new criteria for a suggested roles search. Administrators can select the type of criteria (Matched Rule and Matched Attributes).
Determines whether CA Identity Manager suggests provisioning roles if the current user matches the rule that determines membership in a CA RCM role.
You can override this default setting during the search using the Advanced Suggestion configuration screen.
Determines whether CA Identity Manager suggests provisioning roles that other users who have similar profile attributes also have.
You can override this default setting during the search using the Advanced Suggestion configuration screen.
Determines the display of columns in the list of suggested provisioning roles. When this option is selected, CA Identity Manager displays the Weighted Score column, which indicates the highest score the suggested provisioning role received across all the criteria in the search.
Defines a threshold for 'Matched Attributes' search results returned by the suggest role feature. For each suggested role, CA RCM returns a score from 1 to 100 percent depending on the level of attribute matching. Roles suggested with a score less than the threshold are not displayed.
Note: Some Identity Manager attributes may be more important to you than others, therefore CA RCM allows you to customize the weight of any attribute in order to provide more useful analytics. For more information about setting attribute weights, see the CA RCM Configuration Guide.
Define settings for the bulk loader task.
The Bulk Loader task allows you to create or modify many users at once. To avoid having to assign provisioning roles manually to each user one by one, you can enable Smart Provisioning on the Bulk Loader task. Smart Provisioning automatically assigns provisioning roles to each user based on suggestions from CA RCM.
Determines if the Bulk Loader task uses ‘Matched Rules’ to search for roles. Any roles returned are automatically assigned.
Determines if the Bulk Loader task uses ‘Matched Attributes’ to search for roles. Any roles returned that exceed the Weighted Score Threshold are automatically assigned.
Defines a threshold for 'Matched Attributes' search results returned by the suggest role feature. For each suggested role, CA RCM returns a score from 1 to 100 percent depending on the level of attribute matching. Roles suggested with a score less than or equal to the threshold are not assigned.
Note: Some Identity Manager attributes may be more important to you than others, therefore CA RCM allows you to customize the weight of any attribute in order to provide more useful analytics. For more information about setting attribute weights, see the CA RCM Configuration Guide.
Define settings for enabling Out of Compliance analytics for all tasks.
Determines the level of information from the CA RCM compliance analysis that CA Identity Manager displays.
You can set the following levels:
Note: For more information about the behavior of the different levels, see Types of Violations.
Indicates the minimum severity score of compliance violations to display. For example, if you specify 75, CA Identity Manager only displays compliance violations that have a severity score of 75 or above.
This setting limits the number of compliance violations that appear for the task.
If Issue Error Messages is selected, this setting also affects which tasks can be submitted. For example, if you set the cutoff to skip errors with low scores, users can submit tasks that contain errors.
When selected, compliance checks occur automatically when a task is submitted. Users do not have to manually select the Check Compliance button to see compliance violations.
Note: If enabled, tasks executed by TEWS also enforce compliance checks on submit. This option does not apply to bulk loader tasks.
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |