CA Identity Manager and Governance Integration Guide › Integration Concepts › Import and Export

Import and Export

To introduce CA Identity Manager data to CA Identity Governance, you perform an import. The import process updates both the master and model configurations as follows:

1. The product creates a local copy of all the CA Identity Manager data.
2. The product compares the local copy with the master configuration. This results in a list of all changes since the last time the import ran.
3. The master configuration is updated with all the changes, and the master configuration now reflects everything in CA Identity Manager.
4. All changes are made in the model configuration, one by one. If the model configuration was the same as the master configuration, it will also be the same after the import. However, if there were changes made in the model, they are not overwritten by the import.

A CA Identity Governance universe is coupled with a CA Identity Manager Environment, and you import corporate users as the CA Identity Governance users. CA Identity Manager endpoint objects are imported as CA Identity Governance resources.

Important! Only one universe can be associated with a CA Identity Manager environment. If you must manage a different CA Identity Manager environment, create a new universe. If you delete a universe and create a new one, you must do a fresh import for the integration to work with the new universe.

You can customize the following data that you want to import:

• What types of endpoint objects to import. If you only want a subset of a particular object type, you can also apply filters to the data that is imported.
• What attributes are mapped to what CA Identity Governance fields.

To push updated CA Identity Governance data to CA Identity Manager, you perform an export. The export process takes the differences between the Master and Model configurations, creates a DIFF file and sends those changes to CA Identity Manager. When CA Identity Manager completes each change defined in the export task, it sends a notification back to CA Identity Governance. At that time, CA Identity Governance updates the Master to reflect what is in the Model and Continuous Update keeps CA Identity Manager and the CA Identity Governance Master configuration synchronized.

An export from CA Identity Governance now updates data in the CA Identity Manager object store, and not only the Provisioning Server. This allows you to take advantage of the following CA Identity Manager features:

• CA Identity Manager task model
• CA Identity Manager transaction logging
• CA Identity Manager policy triggers