CA Identity Manager and Governance Integration Guide › Integration Concepts › Continuous Update

Continuous Update

To support integration, certain changes made in CA Identity Manager are queued up and passed to CA Identity Governance. This feature allows CA Identity Governance to make provisioning role suggestions and validate changes against compliance policies, based on current CA Identity Manager information, instead of waiting for another import from CA Identity Manager to update the CA Identity Governance data.

When a user, role, or account change occurs, CA Identity Manager generates a notification and adds it to a queue. At specified intervals, CA Identity Manager creates an aggregate notification with all the information in the queue (up to the maximum batch size) and sends it to CA Identity Governance.

CA Identity Manager continuously updates CA Identity Governance when the following events occur:

• Creating, modifying, or deleting a user
• Creating, modifying, or deleting provisioning roles
• Adding an account template to a provisioning role
• Creating, modifying, or deleting an account
• Creating, modifying, or deleting an account template
• Assigning an account to a resource or removing an account from a resource
• Assigning an account template to a resource or removing an account template from a resource
• Adding a provisioning role to a provisioning role (nested roles) or removing a provisioning role from a provisioning role

Continuous updates occur automatically when an active connection to CA Identity Governance exists in an CA Identity Manager Environment.