Implementing Policy › Security › CA EEM and CA Workflow User Base Configurations › CA SDM

CA SDM

CA SDM stores contact information in MDB tables. These tables have no relationship to CA EEM. CA SDM does not use CA EEM for access or identity management. CA SDM manages its own access and security with Access Types and Data Partitions.

CA SDM uses CA EEM only for authentication. If you want to use CA EEM to authenticate users in CA SDM, install CA EEM. If you integrate CA SDM with CA EEM, it replaces the CA SDM operating system authentication with CA EEM authentication.

Note: For information about installing CA EEM, see the Implementation Guide. To integrate CA EEM and CA SDM, you must set the eiam_hostname, use_eiam_artifact, and use_eiam_authentication options in Options Manager, Security. For more information about these options, see the Online Help.

The CA SDM user base is separate from that of CA EEM, and therefore separate from the CA Workflow user base. The advantage for CA Workflow is that workflow items may be assigned to and completed by individuals outside of CA SDM. This is useful when CA EEM points to your organization’s LDAP server.

The challenge lies in the CA SDM integration. A workitem cannot be assigned directly to the actual CA SDM contact record. Workitem assignment to CA SDM contacts can be made only if both of the following conditions are met:

• The CA SDM contact has a corresponding record in CA EEM
• Those records have matching userids

To summarize:

• CA SDM uses the MDB to store Contact information. CA SDM also features an LDAP integration, which allows it to create new Contacts from an LDAP server and synchronize existing contacts with the directory.
• CA EEM is CA’s solution to centralized user management. If you have several CA products installed, they all may be using CA EEM to store identities and access policies.
• CA EEM may be configured to either point to an external (LDAP) directory or use the MDB to store user information. CA EEM itself has an LDAP interface for use when it is configured to use the MDB.

  Note: The tables used by CA EEM in the MDB are different from the ones used by CA SDM.

• CA Workflow always uses CA EEM for its user information and authentication. Workitems can be assigned only to users known by CA EEM, and only users defined by CA EEM may access CA Workflow’s IDE and Worklist web UI.

The following information discusses the various configuration options for the products and how they affect CA SDM and CA Workflow integration. Select the configuration that best matches your use of CA Workflow and (optionally) an LDAP directory server.

More information:

CA EEM and CA Workflow User Base Configurations

CA EEM as LDAP Configuration