Sun JAVA MQ- Pending COnfiguration

In This Video You can see after Broker creat--

first Create -- Object Store

then it will comes with Destination and Connection Factory, just configure all the parameter like in this video and rest will see in next Post-Video


I have here added all these parameters

Broker Name --- idmBroker
host local host
port 7676
user name admin
password admin

Brokers having 2 main component

1. Service
2. Destination idm_Q_destination (name)

Now i crearted Object Store - just add one new Object Store
Object Store odmObjectStore (Name)

Added 2 main classes

Name = java.naming.factory.initial
value = com.sun.jndi.fscontext.RefFSContextFactory

Name = java.naming.Provider.url
value = file:///c:/idm_MQ_TEMP ( Here we can put Any Address where we want to store the Value, even we can put some ldap address, that will explain you later.

Destination Object

LookUp Name idm_Destination_Object
Destination Name idm_Destination_Object

Connection Factory

LookUp Name idm_Connection_Factory

Default User guest
Pasword guest

Pre requisit - Installation and configuration -- for PWD-SYNC

In my Previous post i have installed the PWD SYNC on domain control and explained you why we need password sysncronization, and i installed also.

there is the 2 way to do the password Syncronization functional one is Direct Method and 2nd is Through JMS Methos,

Through JMS methos is mor secure and more common now a days in enterprise, because its safe - because it provide the security feature for preventing lost password. and till that password not reach to the destination, it will be in Queoe, and on certain period of second update will be done. Now one more thing i want to tell you that, Password Sysnchronization will prefer HTTPS:// Protocol, in place of HTTP://, because its Secure and work with SSL also, will explain exvery thing, but i am writing you the Step for this JMS Method Based Password Syncronization.

Install - Password Syncronization Tools on Domain Controller (finished in previous )

Configure - Sun Message Queue

Create - Broker

Connect Broker

Configure Queue

Create Storing Object

Configure - Destination

Configure - Connection Factory

because Its All required when we configure the JMS Listner Adaptor in Identity Management like

java.naming.Provider.url = " "

java.naming.factory.initial = " "

So that first i am going to configure "Sun Message Queue"---- i have downloaded this Software from http://www.sun.com/software/products/message_queue/get.jsp (Download)

And -- http://docs.sun.com/app/docs/prod/messq.37?l=en&a=view (Documentation)

The Latest Version of JMQ is 4.2, but here i am cretaing Video on 3.7 - Update - 1, version.

Sun Java System Message Queue 3.7 UR1 Administration Guide

Starting Brokers

First Download the Software and Copy on Any where in The Directory, and see the Directory Structure, you will get the Main Directory in "MQ", and that is the parent Directory for that.

We use yhe utilty to configure "mq\bin\imqbrokerd" (A broker’s configuration is governed by a set of configuration files)

You can start a broker interactively from the command line, using the Broker utility (imqbrokerd). (Alternatively, on Windows, you can start a broker from the Start menu.) You cannot use the Administration Console (imqadmin) or the Command utility (imqcmd) to start a broker; the broker must already be running before you can use these tools.

Create Broker & Connect - (Video Below)

Broker Name ----- "idmBroker"

Host ----- "" or localhost

port Numebr ----- " 7676"

user name ----- "admin"

password ----- "admin"

When Broker Created then right Click on Broke and click on connect Broker, then it will connected after that.

next posting will upload destination and Object Store --(Destination and Connection Factory)

pre-requisit configuration for password sysncronization for Sun IDM

Some More FAct About Installed Password Sync

After Installation of Password Syncronization Tools on Domain Controller you can check all these files is avaliable or not? And you can see all the above Screen also as its you can fouund in previous video also.

files that are installed on each domain controller

Installed Component Description

%$INSTALL_DIR$%\configure.exe PasswordSync configuration program

%$INSTALL_DIR$%\configure.exe.manifest Data file for the configuration program

%$INSTALL_DIR$%\passwordsyncmsgs.dll DLL that handles PasswordSync messages

%SYSTEMROOT%\SYSTEM32\lhpwic.dll Password Notification DLL that implements

the Windows PasswordChangeNotify()

function

To Configure PasswordSync

Start the PasswordSync configuration application??? through program file or you can use command prompt also. to configure.

"Program Files -> Sun Identity Manager PasswordSync -> Configuration"

before its mentioned that password Sync. through 2 diffrent way one is Direct method or second one is through JMS methods

for direct method we can use the below command on command prompt>>>

C:\InstallDir\Configure.exe -direct

Installation of Password Syncronization Tools

Password Syncronization Tools you can find in the Installation Directory of Sun IDM 8.0.0 or 8.1.0 version >> "Dive"\Sun IDM\8.1\IDM_8_1_0_0\pwsync.

We just install PWSYNC where is your Domain Controller like Windows 2003 Server or any where where is the Domain Controler and want to access Resources through Active Directory.

So i have installed PWSYNC -- You can Find Video Below.

Now in this Vide we can see password syncronization installed. in next Post will configure the password Synchronization and prerequiset adaptor will install and configure through Sun IDM "configurator" login will deployee All

Password Synchronization in Sun IDM 8.1

PasswordSync :--

You can find this Important Topic in Sun IDM 8.1 Documentation of Business Administration - Chapter - 11

Here i am Trying to synchronize password with Active Directory - IDM and Other Resources.

PasswordSync (Tools) detects user password changes initiated on Windows domains and forwards those changes to Identity Manager.

Identity Manager then synchronizes password changes with the other resources defined in Identity Manager.( So that there no need to change the password on every where, and through Single User ID and password we can access All Resources which is connected through IDM with Active Directory. - Same Domain Controller..

What is PasswordSync?

PasswordSync feature keeps user password changes made on Windows Active Directory domains synchronized with other resources defined in Identity Manager.

Password Synchronization Tools must installed on All the Domain Controller where Resources will be connected through IDM with Active DIrectory

And password Sync installation means "lhpwic.dll" file be presant on All the Domain Controller Machine.

How it Work--

"lhpwic.dll" DLL receives password update notifications from Windows, encrypts them, and sends them over HTTPS to the PasswordSync servlet. The PasswordSync servlet is located on the application server running Identity Manager.

this notification can be send through HTTP:// & HTTPS:// Protocol to the Password Sync Servlet that must presant on Sun IDM.

This Transfer has to by 2 Ways:--

1. Direct Methods

2. Through JMS

Direct Method is not implementing every time, its for small Enterprise, and where no need to worry about the Message Delivery Notification.. and this has to be implemented through IDM Native class.

And for the Security and message Delivery COnfirmation we use Through JMS, --

Password Sync. Servlet sends the password information to Identity Manager using JMS (Java Message Service). The servlet submits password changes to the JMS Message Queue.

Identity Manager’s JMS Listener Resource Adapter checks the Queue for new messages. If a password change message is found waiting on the Queue, the JMS Listener Adapter takes the message off the Queue and imports it into Identity Manager

So that if we have to try password Sync. through JMS Method we must implemet JMS Listner in our Existing Identity Manager Environment through Managed resources.

Sun IDM Optional Component

When Sun IDM Installed and its working properly there is 2 Most Important componet will have to install (required)

1. Gateway
2. Password Syncronization

Boths are most important componet for Identity Management.

Installing the Sun Identity Manager Gateway

Identity Manager requires a lightweight gateway to manage resources that cannot be directly accessed from the server. If we plan to set up & Access any of the following resource adapters, we must install the Sun Identity Manager Gateway.( Take of Version Control for this Gateway--- Same version of the IDM

Windows Active Directory
Domino
Novell NetWare, including GroupWise
Remedy
RSA ACE/Server
Scripted Gateway

The Gateway may be installed on at least Windows 2000 SP3 and Windows 2003 platforms

You should run an instance of the Gateway on multiple machines to prevent the Gateway from becoming a single point of failure. Configure network to provide failover if the main Gateway instance dies.

Systems that are running the Identity Manager Gateway should be configured so that Dr. xWatson does not produce visual notifications. If this feature is set and the Gateway encounters an error, the process will hang until the pop-up window is closed.

Refer to the following web page for information about setting international support on Windows XP and Server 2003 systems:
http://www.microsoft.com/globaldev/handson/user/xpintlsupp.mspx

Installation of Gatway

Select the Windows machine on which to install the Gateway

It must be a member of the domain in which the accounts and other objects will be managed

Create a directory called idm on the remote system

Copy the gateway.zip file from the Identity Manager installation package

Unpack and copy the contents of the gateway.zip file to the idm directory

From the directory where the Gateway files are installed, run the following command to install the Gateway as a service:gateway -i

Run the following command to start the Gateway service:gateway -s

you can check other Command for gatywat installed, and see the image for that, and you can see some important Errors that will come on Gateway installed domain.

’Overlapped I/O operation is in progress’

The most common cause of this message is that you have asked for the service to be installed or removed before a prior installation or removal has fully completed. Check the state of the service

’Input/output error’

that you do not have rights to work with this service, if you want to see more about the gateway for the Domain controller, you can see in Video for full installation process and how to check it that gateway is running or not and all other Errors. below

Deploye the idm.war File and Start IDM on Web Browser

Here Deployee the idm.war file, and that deployee through Application server, see all the steps how to deployee the war file on Application server.

When idm..war sucessfull deployee, then must Import init.xml file and that take it from installed IDM directory >>> Sample Folder.

We must take care of All the .jar file into the lib folder like jms.jar / activation.jar / repository connector .jar and jms.jar

Here from belw link you can see how to install "idm" on diffrent Application server see the below link ----- http://docs.sun.com/app/docs/doc/820-5594/ghmel?l=en&a=view

Installation of Sun IDM 8.0 or 8.1

When Every thing is installed like JAVA / repository / App- server now at last Sun IDM Will install on any where in the Drive.

Here is the Video

How to Create waveset Database in MYSQL repository

After Application Server Installation we much create Database, i.e waveset in Installed repository, Here is the Video

"waveset" Schema in MYSQL

5th Step ( How To Install Application Server)

How to Install Application Server.

Here I am going to give you Demonstration of Sun One Application Server, That you can find it from sun Web site..

We can install Any Application server According to the requirement and Deploye / Install IDM on that Container.

For Other Application Server Installation you can through on these below link

http://docs.sun.com/app/docs/doc/820-5594/ghrsw?l=en&a=view ( For Glassfish)

STEP - 4 (Keep in mind All These Information)

Step - 4

After all the Three Step of Installation some necessary step that we will have to follow like
1. Collect Some .jar files (activation.jar / mail.jar / jms.jar)

2. Copy "create_waveset_tables.mysql" [That you can find in the installer of IDM) like here{\idm 8.0.0\IDM_8_0_0_0\db_scripts\create_waveset_tables.mysql} >>>> {idm-mysql\mysql\bin } Where you have install the MySql as Repository

3. One more .jar file that we can download it from mysql.com website i.e "mysql-connector-java-5.0.5-bin.jar" that we can copy it into some folder in WEB-INF/LIB folder at the time of installation of Sun - IDM

4. Download Sun IDM Kit from sun website

The Above all the three step is must for sucessfull installation of Sun IDM.

Step - 3 ( MySQL - Installation )

Here we can take Any Repository Like Oracle, Sql Server, DB2 or My SQL that i am taking Here, BUt for ALL There is Diffrent Connector will have to copy into the Lib Folder of the Container, Name of All the Connector is below

Step - 3 ( To Install Any Database For Repository) Like MySql, Oracle, Sql Server or DB2

MySQL Unpack the connector package.
Copy the mysql-connector-Version-bin.jar file to the WEB-INF\lib directory.
Optional: Rename the .jar file to mysqljdbc.jar.
Connectror downloaded from http://dev.mysql.com/downloads/

Oracle Copy the .jar file to the idm\WEB-INF\lib directory.
Optional: Rename the .jar file to oraclejdbc.jar.
Connector coped from Oracle/jdbc/lib/ojdbc14.jar
Or can be downloaded from otn.oracle.com for specific driver for diffrent
version and that must compatable with Java-JDBC version and run Time
Environment

SQL Server Copy the sqljdbc.jar file to the WEB-INF\lib directory.
Optional: Rename sqljdbc.jar to mssqlserver.jar.
The Connector will be copied from Installed Directory of Microsoft SQL Server
2005 Driver for JDBC/lib if installed version of MS-SQL Server is 2000 then will
coped all the three .jar file that presant in the lib Folder

DB2 Unzip the db2java.zip file.
Note: On Windows systems rename the db2java.zip to db2java.jar.
Copy the appropriate JAR files to the WEB-INF\lib directory.
Optional: Rename the .jar file to db2jdbc.jar.

Start the JDBC driver:
On UNIX systems, enter: db2jstrt port# (default 6789) running under instant
owner
On Windows systems, start from services

Here i am giving the example only for MYSQL, for other Database you can visit this link for other Databases. http://docs.sun.com/app/docs/doc/820-5594/ghrqf?l=en&a=view

Copy the create_waveset_tables.mysql script to a temporary location. This script is located in the db_scripts directory in the Identity Manager installation package, and also in the idm\sample directory if Identity Manager is already installed.

Modify the create_waveset_tables.mysql script to change the database user password

Create the new tables by using one of the following commands:
On Windows
c:\mysql\bin\mysql -u root <>

this Command will create the database in MySQL, you can view "waveset" Database with MYSQL Command and can see all the Database Schema.

And then Copy the connector in Lib Folder of the Container--WEB-INF\LIB\*.jar Files

Step - 2 ( Installation of Java and set the Java Run Time Environment)

Step - 2

After Creating the Directory Structure we have to first install the Java, because with out JRE , Sun IDM will Not install, For The basic Requirement of Installation of IDM go on previous Post ( Basic Requirement)Here You can Find that How java Has to install and How to set the path of JAVA_HOME and class path inside Environment Variable.Because duraing installation of Sun - IDM it ask of JRE, here i am going to install the JDK 1.7 Version That you can download it from Sun Website

Sun - IDM Installation - Directory Structure

First I am going to show you that how you will install the Sun - IDM 8.0.0, or 8.1 For that you have to understand the Directory Structure and what basic Step You will have to follow so that you can easily Install the Identity Management.

SEE THE VIDEO for All the Steps--

Step - 1

Sun IDM Adaptor Class

Adapter Name and Associated Class

Access Enforcer

com.waveset.adapter.AccessEnforcerResourceAdapter class. This class extends the SAPResourceAdapter class.

Sun Access Manager

com.waveset.adapter.SunAccessManagerResourceAdapter

Sun Java Access Manager Realm
com.waveset.adapter.SunAccessManagerRealmResourceAdapter

ACF2
com.waveset.adapter.ACF2ResourceAdapter

Actuve Directory
com.waveset.adapter.ADSIResourceAdapter

AIX
com.waveset.adapter.AIXResourceAdapter

BridgeStream SmartRoles
com.waveset.adapter.SmartRolesResourceAdapter

Clear Trust
com.waveset.adapter.ClearTrustResourceAdapter

Database Table
com.waveset.adapter.DatabaseTableResourceAdapter

DB2
com.waveset.adapter.DB2ResourceAdapter

Domino
com.waveset.adapter.DominoResourceAdapter

External Resources
com.waveset.adapter.ExternalResourceAdapter

Flat File Active Sync
com.waveset.adapter.FlatFileActiveSyncAdapter

HP-OPEN VMS
com.waveset.adapter.VMSResourceAdapter

HP-UX
com.waveset.adapter.HPUXResourceAdapter

Insafe Nexeus
com.waveset.adapter.INISafeNexessResourceAdapter

JMS Listner
com.waveset.adapter.JmsListenerResourceAdapter

LDAP
com.waveset.adapter.LDAPResourceAdapter

Microsoft Identity Integration Server
com.waveset.adapter.MIISResourceAdapter

MS-SQL SERVER
com.waveset.adapter.MSSQLServerResourceAdapter

MYSQL
com.waveset.adapter.MySQLResourceAdapter

NETWARE NDS
com.waveset.adapter.NDSResourceAdapter

NetWare NDS with SecretStore
com.waveset.adapter.NDSSecretStoreResourceAdapter

Oracle
com.waveset.adapter.OracleResourceAdapter

Oracle ERP- for E-Business SUIT
com.waveset.adapter.OracleERPResourceAdapter

OS/400
com.waveset.adapter.OS400ResourceAdapter

PeopleSoft Component
com.waveset.adapter.PeopleSoftComponentActiveSyncAdapter

PeopleSoft Component Interface
com.waveset.adapter.PeopleSoftCompIntfcAdapter

RACF
com.waveset.adapter.RACFResourceAdapter

RACF-LDAP
com.waveset.adapter.RACF_LDAPResourceAdapter

RED HAT LINUX & SUSE LINUX
com.waveset.adapter.RedHatLinuxResourceAdapter & com.waveset.adapter.SUSELinuxResourceAdapter

Remeady
com.waveset.adapter.RemedyResourceAdapter

SAP
com.waveset.adapter.SAPResourceAdapter

SAP-HR Active Sync
com.waveset.adapter.SAPHRActiveSyncAdapter

SAP Enterprise Portal
com.waveset.adapter.SAPPortalResourceAdapter

Scripted gateway
com.waveset.adapter.ScriptedGatewayResourceAdapter

Scripted HOST
com.waveset.adapter.ScriptedHostResourceAdapter

Scripted JDBC
com.waveset.adapter.ScriptedJdbcResourceAdapter

Secure ID / ACE-SERVER
com.waveset.adapter.SecurIdResourceAdapter

Secure ID/ACE-SERVER LINUX
com.waveset.adapter.SecurIdUnixResourceAdapter

Shell Script
com.waveset.adapter.ShellScriptResourceAdapter

Siebel CRM
com.waveset.adapter.SiebelCRMResourceAdapter

Site Minder-ADMIN
com.waveset.adapter.SiteminderAdminResourceAdapter

SITE MINDER-LDAP
com.waveset.adapter.SiteminderLDAPResourceAdapter

Site Minder Example Table
com.waveset.adapter.SiteminderExampleTableResourceAdapter

Solaris
com.waveset.adapter.SolarisResourceAdapter

Sun Java System Communication Server
com.waveset.adapter.SunCommunicationsServicesResourceAdapter

Sybase Ace
com.waveset.adapter.SybaseASEResourceAdapter

Tivoli Access Manager
com.waveset.adapter.AccessManagerResourceAdapter

Top Secret
com.waveset.adapter.TopSecretResourceAdapter

Windows NT
com.waveset.adapter.NTResourceAdapter

Its All ABout the name of Managed Resources and its Associated Resources----

Identity Manager 8.0 Application Programming Interface (API) Support

API TYPE CLASS NAME

Session com.waveset.msgcat.
com.waveset.util.
*com.waveset.object.
com.waveset.exception.
com.waveset.expression.
com.waveset.config.
com.waveset.session.SessionUtil
com.waveset.session.ScriptSession
com.waveset.session.SessionFactory
com.waveset.session.Session
com.waveset.session.UserViewConstants


Adapter

com.waveset.adapter
com.waveset.util.Trace

Policy

com.waveset.policy.PolicyImplementation
com.waveset.policy.StringQualityPolicy

Report

com.waveset.report.BaseReportTask

Task

com.waveset.task.Executor
com.waveset.task.TaskContext

UI

com.waveset.ui.FormUtil
com.waveset.ui.util.RequestState
com.waveset.ui.util.html.

Workflow

com.waveset.provision.WorkflowServices
com.waveset.session.WorkflowServices
com.waveset.workflow.WorkflowApplication
com.waveset.workflow.WorkflowContext

SPE

com.sun.idm.idmx.api.
com.sun.idm.idmx.txn.TransactionPersistentStore
com.sun.idm.idmx.txn.TransactionQuery
com.sun.idm.idmx.txn.TransactionSummary

Supported Resources --- with Sun IDM

There are 2 Types of Resources that IDM will support,

1. Managed Resources
2. Custom Resources

for both the resources IDM will implement Specific class that will explain you in the next post- of Resources.

Identity Manager software supports these resources:

Customer Relationship Management (CRM)

Siebel version 7.0.4, 7.7, 7.8, 8.0 CRM software

Databases

Generic database table
IBM® DB2® Universal Database for Linux, UNIX®, and Windows® 8.1, 8.2
Microsoft® Identity Integration Server (MIIS) 2003
Microsoft SQL Server 2000, 2005
MySQL™ 4.x, 5.0, 5.1
Oracle Database 9i®, 10g Release 1®, 10g Release 2®
Sybase Adaptive Server® 12.x
Scripted JDBC (manages resources using JDBC 3.0 drivers or later)


Directories

LDAP v3
RACF LDAP
Microsoft® Active Directory® 2000, 2003
Microsoft® Active Directory® Application Mode (ADAM) Windows 2003 SP1
Novell® eDirectory 8.7.1, 8.8
Novell NetWare® 6.5
Open LDAP
Sun™ ONE Directory Server 4.x
Sun Java™ System Directory Server 5.x, 6.3

Enterprise Resource Planning (ERP)

MySAP ERP 2005 (ECC 6.0) Kernel version 7.00
Oracle E-Business Suite on Oracle Applications 11.5.9, 11.5.10, 12
Peoplesoft® PeopleTools 8.1 through 8.4.2
Peoplesoft PeopleTools HRMS 8.0 through 8.8, 9.0
SAP® R/3 Enterprise 4.7 (SAP BASIS 6.20)
SAP® NetWeaver Enterprise Portal 2004 (SAP BASIS 6.40), 2004s (SAP BASIS 7.00)
SAP® Governance, Risk, and Compliance (GRC) Access Enforcer 5.1, 5.2

Help Desk

BMC Remedy Action Request System Server 6.0, 6.3, 7.0
BMC Remedy Service Desk Application 7.0
Remedy Help Desk 6.0

Message Platforms

Sun Java System Messaging and Calender Service Java Enterprise System 2005Q1
Lotus Notes® (Domino) 6.5, 7.0
Microsoft® Exchange 2000, 2003, 2007
Novell® GroupWise 7.0 (using the Novell NDS adapter)

Miscellaneous

Flat files
JMS Message Queue Listener
Generic UNIX Shell Script
Generic Windows Script Adapter

Operating Systems

HP OpenVMS 7.2, 8.3
HP-UX 11.0, 11i v1, 11i v2
IBM AIX® 4.3.3, 5.2, 5L, 5.3
IBM OS/400® V4r3, V4r5, V5r1, V5r2, V5r3, V5r4
Microsoft Windows® 2000, 2003
Red Hat Linux 9.0
Red Hat Linux Advanced Server 2.1
Red Hat Linux Enterprise Server 3.0, 4.0
Sun Solaris™ 9, 10
SuSE Enterprise 9

Role Management System

BridgeStream SmartRoles 2.7
Security Managers
eTrust CA-ACF2®
SecurityeTrust CA-Top Secret® Security 5.3
IBM RACF®
INISafe Nexess 1.1.5
RSA ClearTrust 5.5.2, 5.5.3
RSA® SecurID® 5.0, 6.0, 6.1.2
RSA® SecurID® for UNIX 5.1, 6.0, 6.1.2
Scripted Host

Web Access Control

IBM Tivoli® Access Manager 4.x, 5.1, 6.0.0 FP09
Netegrity® Siteminder® 5.5
RSA® ClearTrust® 5.0.1
Sun™ ONE Identity Server 6.1, 6.2
Sun Java™ System Identity Server 2004Q2
Sun Java™ System Access Manager 6 2005Q1, 7 2005Q4

Browsers

Microsoft Internet Explorer 6.x, 7.x
Safari 2.0 and later
For Mac OS X 10.3.3 and later, 3.0.x
Firefox 1.04, 1.05, 1.06, 1.5, 2.0.0.4

Application server --- for Sun Idm

Application Servers

The application server you use with Identity Manager must be Servlet 2.2-compliant and installedwith the included Java platform (unless noted as follows).

Identity Manager requires Java SE Development Kit (JDK) 5 or 6 on the following application servers---

Apache® Tomcat 5.5.x, 6.0.x
• BEA WebLogic® Server™ 9.1, 9.2, 10
• IBM WebSphere® 6.1
• JBoss Application Server 4.2
• Oracle Application Server Enterprise Edition 10g Release 3 (10.1.3)
• Oracle Application Server Standard Edition 10g Release 3 (10.1.3)
• Sun Java™ System Application Server 9.1 (GlassFish v2 UR1, 32-bit and 64-bit)
• Sun Java™ System Application Server Platform Edition 8.1, 8.2, 9.0
• Sun Java™ System Application Server Enterprise Edition 8.1, 8.2
• Sun Java™ System Application Server Standard Edition 8.2

Repository Database Servers


Identity Manager supports the following repository database servers:

IBM® DB2® Universal Database for Linux, UNIX®, and Windows®(Version 8.1, 8.2)
Microsoft SQL Server™ 2005
MySQL™ 5.0, 5.1
Oracle 9i® and Oracle Database 10g, 10g Release 1 and 10g Release 2®,11g

Sun Identity Manager Gateway

If we plan to set up Windows Active Directory, Novell NetWare, Remedy, Lotus Notes (Domino)or RSA ACE/Server resources, you must install the Sun Identity Manager Gateway., but we must take care to see the version of Gateway, that is compatable with Sun IDM

Supported Software and Environments

In this section i am going to write all the detail about what software require for the SUN-IDM installation and how will move from start and deploye in real Life environment.

Operating Systems

HP-UX 11i v1, 11i v2
AIX 5.2, 5L v5.3
Microsoft Windows 2000 SP3, 2000 SP4
Microsoft Windows Server 2003
Solaris 9, 10 Sparc and x86
Red Hat Linux Advanced Server 2.1
Red Hat Linux Enterprise Server 3.x, 4.x
Novell SuSE Linux Enterprise Server 9 SP1

Java Support

JRE 1.5 or new Update from JSE before you have to install the Sun IDM, because IDM need the Run Time Environment, so that set the JAVA_HOME = {path of the Installed Directory of JAVA) and Set the path also so that IDM Run Time Environment can search bin folder of java

System Virtualization Support in Sun Java System Products

Sun support for Sun Java System products when used in conjunction with system virtualization products and features. It applies to Sun products contained in the following Sun Java System suites:

Sun Java Application Platform Suite
Sun Java Identity Management Suite
Sun Java Composite Application Platform Suite
Sun Java B2B Suite
Sun Java ESB Suite
Sun Java Web Infrastructure Suite

Introduction

A core capability of system virtualization offerings is the ability to execute multiple operating system (OS) instances on shared hardware. Functionally, an application deployed to an OS hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Sun performs testing of its Sun Java System products on select system virtualization and OS combinations to help validate that the Sun Java System products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems.

System Resource Sizing

The combination of being able to deploy multiple OS instances and applications on a single system and the ease by which system resources can be allocated to OS instances increases the likelihood of realizing undersized environments for your applications. Under these circumstances it is especially important for you to follow the documented resource allocation recommendations and requirements for processor, memory, storage and network for each virtual OS instance and the underlying hardware platform so as to ensure sufficient levels of application performance.

Refer to the Sun Java System product documentation for recommended and supported system resource requirements.

Advanced Features of Virtualized Systems Enterprise-oriented system virtualization offerings provide features to enable administrators to efficiently manage resources provided to OS instances. For example, administrators can dynamically adjust the amount of memory allocated to each OS instance and clone or live-migrate OS instances along with their deployed applications. Since the Sun Java System product deployments may not be qualified to operate under these dynamic circumstances, you should exercise caution when utilizing advanced features such as dynamic resources management. As Sun Java System products are tested successfully in these advanced virtualization scenarios, this support statement will be updated to reflect support for these features.

Sun™ Identity Manager Release -- Version 8.0 May 2008 ( BASIC IDEA ABOUT IDM - and installation support and Requirement--||||

Sun™ Identity Manager Release -- Version 8.0 May 2008 ( BASIC IDEA ABOUT IDM - and installation support and Requirement )

Sun™ Identity ManagerVersion 8.0 May 2008•

Introduction

• Identity Manager 8.0

Features

• Installation and Update Notes

• Deprecated APIs

• Documentation Additions and Corrections

Introduction

Supported Software and Environments

• Upgrade Paths and Support Policies

• Redistributable Files

• How to Report Problems and Provide Feedback

• Sun Welcomes Your Comments

• Additional Sun Resources

Some More Fact About Sun Identity Management

What is IDM ( Identity Management)

Identity Management can help you manage, protect, store, verify, and share identity data throughout the enterprise and across extranets. It can help you to Access Resource inside or out side your Systems / Domain.

There is Diffrent Idenitity Management is in the market Like Sun / Oracle / IBM / Radiant and many More.

But According to My exprience Sun _ IDM is the best one, Sun's Identity Management PortfolioSun Java System Identity Manager, Sun Java System Access Manager and Sun Java System Directory Server Enterprise Edition are the three new identity management products, that combine Sun's deep technology expertise with industry-leading software acquired from Waveset Technologies.

The Java System Identity Manager is the first product on the market to combine user provisioning and meta-directory capabilities — a trend analysts have been predicting. Java System Identity Manager securely manages both identity permissions and profiles, while also providing synchronization services for identities across the enterprise. The Java System Access Manager is designed to help customers manage secure access to both internal and external web-based resources. With the introduction of the Java System Access Manager, Sun will lead the industry in the support of federation standards, including both Liberty Phase 2 and SAML 1.1 specifications. The Java System Directory Server Enterprise Edition, a central repository for storing enterprise identity information, is the first to deliver enterprise-level services such as built-in fail-over, load-balancing, security and integration with Microsoft Active Directory — yet another proof-point in Sun and Microsoft's commitment to work together on interoperability in order to enable better network services compatibility.

Alliances: Key to SuccessA key component to Sun's identity management strategy is the relationships it has formed with leading professional services firm Deloitte & Touche LLP and systems integration, consulting, and advisory firm PricewaterhouseCoopers, to support the design, customization and deployment of identity management solutions for major customers worldwide."At Deloitte & Touche LLP, we have been predicting increased convergence between metadirectory, directory management, and provisioning technologies for the past two years," said John Clark, Deloitte & Touche LLP Security Services principal. "Sun's new product announcement and future product vision is a positive step in that direction. We are pleased to work with Sun to deliver strategic offerings, such as the Employee LifeCycle Management solution, around the Java Identity Suite, to address our clients' business challenges in the area of Identity Management.""PricewaterhouseCoopers recognizes the importance of identity management to our customers," said Brad Bauch, principal, PricewaterhouseCoopers. "Working closely with leading technology vendors like Sun Microsystems allows us to help our clients achieve a secure and high performance IT infrastructure."With its identity management products, Sun is offering customers a high degree of freedom in designing their identity infrastructure. Sun offers packaged integration with over 60 partner-supplied enterprise resources to provide end-to-end compatibility with third-party components and existing investments. Sun also supports operating platforms including: Solaris Operating System, Linux, Microsoft Windows, HP-UX, IBM AIX and IBM OS/390 and enterprise software environments including: BEA Systems, Entrust Technologies, IBM, Microsoft, Netegrity, Novell, Oblix, OpenNetwork, Oracle Corporation, PeopleSoft, RSA Security and SAP."Managing and controlling access to our systems and information is critical to our business processes. We have successfully deployed Sun's identity management solutions and believe they are on target with their product strategy," said Zulfi Ahmed, vice-president & chief information security officer for Caremark Rx, Inc. "I applaud Sun's continuing commitment to support a wide array of third-party platforms, as this is necessary to support identity management in the large enterprise today."

Sun Releases Identity Management to Open Source

SOA projects frequently involve refactoring sets of reusable services and integrating scattered systems all over the Enterprise. The services that most frequently emerge as common across all Enterprise services include security and identity management. This type of infrastructure service enables Single Sign On (SSO) across a wide variety of services.

In an effort to accelerate SSO efforts, Sun Microsystems has launched the OpenSSO project--an Open Source access management software distribution that provides the means to build authentication, authorization, and session management for Java and web applications and web services.

Sun will be basing future versions of the Sun Java System Access Manager product on OpenSSO, much like OpenOffice.org project is the basis for Sun StarOffice Product. The OpenSSO project falls under the Common Development and Distribution License (CDDL). Information about this license can be found at

http://www.sun.com/cddl/ and http://www.opensource.org/licenses/cddl1.php

Some More Details About the

This is the Account Identity screen for the Sun Identity Management. will explain you all that how it come in the browser. and how you create and manage all about Account

Resources - Identity Management Systems

Resources

When user has to access Any thing thats called resources, and it also can be any thing, like Computer Systems, Data Storage, external devices etc....So thata user can access N-Number of Resources, so that Identity Manager create one Virtual identity for that like A- User from a Software Co. can Access Laptop, Server, Data Base Server, RSA-Security Card and many more, here Idenity manager map user with all the resources and create one Virtual identityIn Genral Corporate Sector's users are grouped into functional departments or geographical divisions. Each of these departments typically requires access to different resources. In Identity Manager terms, this type of group is called an organization.and in the Organization particular Division has to bind with specific user through Some Role.Identity Manager system, you assign roles to user accounts to facilitate efficient enabling and disabling of access to resources.

Users and Account Management

A user is anyone who holds an IdentityManager system account. or an Identification of any thing, and that is unique number or value.

IdentityManager stores a range of data for each user. Collectively, this information forms a user’s IdentityManager identity.

this identity could be user name or accout ID or any thing which has to be unique valaue and identfy the individual in any system like

Bank Account Number, Employee ID, Windows User ID, or any thingw which represant the uniqueness of the systems.

Identity Manager Overview --- ||||

Sun Identity Manager allows you to manage and audit access to accounts and resources. with the help of IDM Tools so that you can do periodic and daily user-provisioning and auditing tasks, Identity Manager provide services for internal and external customers

Goals of the Identity Manager System

• Manage account access to a large variety of systems and resources
• Securely manage dynamic account
• Set up delegated rights to create and manage user account
• Handle large numbers of enterprise resources, as well as an increasingly large number of extranet customers and partners
• Securely authorize user access to enterprise information systems
• Data in Synchronized format
• Define audit policies
• Conduct periodic access reviews
• Monitoring and auditing

So Finally Every things is just move around three things,USER >>>> & Resources & Its Management ( How you manage both Resource and user )

Link for the Sun Identity Management Product

Idenity Manager Product

Sun Idenitity Management - 4 Main Products

Sun Java Identity Manager

• Compliance
• Provisioning Systems
• Create Virtual Identity
• Automated Synchronization
• Scalabality
• Role Based Provisioning
• Password Management
• Delegated Administration
• update-enabling / Disabling of Account

Sun Java Access Manager

• Centralized Access Control
• Single Sign On on Same DNS
• CDSSO (Cross Domain Single Sign On)
• it Works on Application / Webservices
• Authentication / Authorization
• Role & Policies
• Liberty /SAML

Sun Java Fedration Manager

• Business Outsourcing
• N-Number of partner Involvement & share Same Resources
• Worked on partner Network
• Access trusted Domain

Sun Java Directory Server

• Secure & Central Repository
• Identity Profile
• Access Privilage
• Application & Network Resources
• Load Balancing
• Automatic Failover
• Firewall like Security
• Data Distribution

Identity Management

Identity management (ID management) is a broad administrative area that deals with identifying individuals in a system (such as a country, a network, or an enterprise) and controlling their access to resources within that system by associating user rights and restrictions with the established identity. The driver licensing system is a simple example of identity management: drivers are identified by their license numbers and user specifications (such as "can not drive after dark") are linked to the identifying number.

In an IT network, identity management software is used to automate administrative tasks, such as resetting user passwords. Enabling users to reset their own passwords can save significant money and resources, since a large percentage of help desk calls are password-related. Password synchronization (p-synch) enables a user to access resources across systems with a single password; a more advanced version called single signon enables synchronization across applications as well as systems

In an enterprise setting, identity management is used to increase security and productivity, while decreasing cost and redundant effort. Standards such as Extensible Name Service (XNS) are being developed to enable identity management both within the enterprise and beyond.

In a wider context, industry groups such as the World Wide Web Consortium (W3C) and The Open Group are developing standards that would enable global identity management, in which each individual would be uniquely identified, and all applicable data would be linked to that identity. A position paper on the W3C Web site, Requirements for a Global Identity Management Service, maintains that establishing global identity management is crucial for the development of the Web and Web services. The W3C position paper stipulates, among other things, that such a system that must be universally portable and interoperable; that it must support unlimited identity-related attributes; that it must provide adequate mechanisms for privacy and accountability; and that it must be overseen by an independent governing authority.