CA Identity Manager and Governance Integration Guide › Integrating with CA Identity Manager › Define a Connector to CA Identity Manager

Define a Connector to CA Identity Manager

To define an import connector to CA Identity Manager, use the import connector wizard under the connectivity tab of the universe. The wizard guides you through mapping Identity Manager users, roles, and account templates to CA Identity Governance.

The following steps are reflected in the connector wizard. Perform these steps to define a connector to CA Identity Manager.

1. (Connection Settings) Configure the connectivity between CA Identity Manager and CA Identity Governance. Provide the following connection information:
   • Identity Manager Server information and Identity Manager environment credentials.

     Be sure to use the login name of a CA Identity Manager administrator who has admin roles with the following tasks:

     • Create Web Services Configuration
     • View Web Services Configuration
     • Modify Web Services Configuration
     • Delete Web Services Configuration
     • DefineCARCMConnection - included in the CA Identity Governance Configuration Manager role.
     • DeleteCARCMConnection - included in the CA Identity Governance Configuration Manager role.

     Note: For instructions on adding admin tasks to an admin role, see the topic Select Admin Tasks for the Role in the Admin Roles chapter in the CA Identity Manager Administration Guide.

     If you have SiteMinder in your deployment, set the CA Identity Manager port to 80.

   • CA Identity Governance Server information and credentials

     Note: The Register RCM Connection check box is selected by default. This option causes the import to automatically create the CA Identity Governance connection object within CA Identity Manager. Clearing this check box supports the use case of importing one Identity Manager environment into several CA Identity Governance universes. Because Continuous Updates and Smart Provisioning can only work with one universe, if you configure multiple universes to one Identity Manager environment, each time you run an import, it changes the CA Identity Governance connection object in CA Identity Manager to point to the universe you are importing to. By clearing this check box, the import process does not try to create or change the CA Identity Governance connection object within CA Identity Manager.

   • The CA Identity Governance universe to be associated with the Identity Manager environment.
   • The Additional Connection Properties area is only used for setting the FIPSKeyFile property.
2. (Identity Manager Users and Provisioning Roles) Map Identity Manager users to CA Identity Governance users and provisioning roles to CA Identity Governance roles.

   Note the following:

   • Click Add in the right-hand corner of the User Mapping section to add more user mappings between CA Identity Governance and CA Identity Manager.
   • Mapping fields are case-sensitive.
   • Use the filter to import a subset of users or provisioning roles from CA Identity Manager.
   • CA Identity Manager users and provisioning roles are automatically populated in the drop-down list.
   • You can enrich imported user data with supplementary Human Resources (HR) data.
3. (Endpoint Types) Define mappings between endpoint objects and CA Identity Governance resources.

   Note the following:

   • Be sure that you have imported all role definitions files in CA Identity Manager for every endpoint type that you have, otherwise they do not appear in the endpoint type drop-down list.
   • Mapping fields are case-sensitive.
   • For more information about endpoints, and endpoint objects and attributes, see the Endpoint Guides on CA Support.
   • You can enrich imported endpoint data with supplementary resource data.
4. (Summary) Review the connector information and click Finish to save the connector.

   Note: A matching export connector is automatically defined in CA Identity Governance for every import connector you define.