Separate User Store and Provisioning Directories

Important! CA Technologies strongly recommends using a separate user store and Provisioning Directory for new deployments.

The following figure shows a separate user store and Provisioning Directory. In this figure:

A CA IdentityMinder administrator uses an admin task that edits a user in the user store, which affects the Provisioning Directory.
This change may also update an endpoint (such as an email server) which has a connector to the Provisioning Server.

A change made in the Provisioning Server (or an endpoint with a connector to the Provisioning Server) updates the CA IdentityMinder user store and Provisioning Directory.

For example, an endpoint, such as a Human Resources application, might update the email addresses of users.

Edits to user information can be made in the user store, Provisioning Directory, and endpoint systems.