Implementation Guide › CA Identity Manager Architecture › Identity Manager Components › User Store and Provisioning Directory

User Store and Provisioning Directory

To provide options for managing users and automatic provisioning of additional accounts for those users, CA Identity Manager coordinates two user stores:

• The Identity Manager user store, the user store maintained by CA Identity Manager. Typically, this is an existing store that contains the user identities that a company needs to manage.

  The user store can be an LDAP directory or a relational database.

  In the Management Console, you create an Identity Manager Directory object to connect to the user store and to describe the user store objects that CA Identity Manager will maintain.

• The Provisioning Directory, the user store maintained by the Provisioning Server.

  It is an instance of CA Directory and includes global users, which associate users in the Provisioning Directory with accounts on endpoints such as Microsoft Exchange, Active Directory, and SAP.

  Only some CA Identity Manager users have a corresponding global user. When a CA Identity Manager user receives a provisioning role, the Provisioning Server creates a global user.

More information:

Separate User Store and Provisioning Directories

Combined User Store and Provisioning Directory