Implementation Guide › Planning Your Implementation › Develop a Deployment Plan › Deploy Self-Service and Password Management

Deploy Self-Service and Password Management

Deploy self-service tasks and password management before deploying other CA IdentityMinder features for the following reasons:

• Self-service tasks and password management are easy to deploy and provide significant value quickly.
• These features are independent of the delegated administration model and can be reconfigured as needed to address changing business needs.
• These features typically generate the highest volume of tasks that CA IdentityMinder processes on a regular basis. Because of this, they provide a way to test the scalabilty of your implementation before you deploy additional features.

To deploy self-service tasks, you complete the following steps:

1. Configure the self-registration task.

   This is a public task, which is enabled by default during installation. To configure this task, you add or remove fields from the default self-registration task, as needed.

2. Deploy the Self Manager role.

   The member rule for this role should be configured to apply to all users, or should include a member rule that automatically assigns the role to new users. For example, you can create a member rule that assigns the Self Manager role to all full-time employees. When a user self-registers, CA IdentityMinder can set the employee type to full-time (by using a logical attribute handler, or business task handler). The user meets the criteria in the member rule and receives the Self Manager role automatically.

   Note: When you configure member rules for the Self Manager role, do not allow administrators to add or remove role members. Since the role is assigned automatically, there is no need for an administrator to explicitly assign the role.

To deploy password management capabilities, you complete the following steps:

1. Configure the public password management tasks, such as the Forgotten Password task.
2. Create password policies that determine how passwords are created and when they expire.
3. Deploy the Password Manager role, which enables role members to reset user passwords.

Note: For information on roles, tasks, and password management, see the Administration Guide.