By Tushar Mehta and Madhura Damare
All organizations have multiple applications. Everyone wants a single point of entry for applications in the organizations so that the users don’t juggle for applications links/URLs. Identity Governance and Intelligence (called IGI here onwards), is a tool for managing Identity, accesses and governing them. Along with this IGI can also be used as launch point for other application by hooking links in it. So that when user logs in to IGI service center, based on the access user has, he/she will see additional application links. When single-sign on is implemented in the organization, then it become a seamless experience for the users.
This article intends to share steps to configure IGI such that, it become a single launch point for other applications in the organization.
The steps to do the customization are as follows:
- IGI virtual appliance console (VA) , Configure→Custom File Management should be selected, as seen in below diagram.
- Create an application.xml file. You can download the sdk.zip from sdk folder. Extract the zip file. A sample application.xml is available at: customization\IDEASPlatformEnvCustom\properties\desk\console
<DESK>
<REALM name="IDEAS" label="IDEAS" enableHeaderAuth="true" isDefault="true">
<APPLICATION name="SN" label="Service Now" url="https://xxxxx.service-now.com/" openInNewWindow="true" checkISIGPermission="true" img="" img_dis="" img_rol="" order="10" isEndUser="true" showIfDisabled="true"/>
<APPLICATION name="PadLock" label="Secure Systems" url="https://devpadlock.org.com/" openInNewWindow="true" checkISIGPermission="true" img="" img_dis="" img_rol="" order="11" isEndUser="true" showIfDisabled="true"/>
<APPLICATION name="SAP-FICO" label="SAP Financial Accounting" url="https://sap.org.com/" openInNewWindow="true" checkISIGPermission="true" img="" img_dis="" img_rol="" order="8" isEndUser="true" showIfDisabled="true"/>
</REALM>
</DESK>
- In the above xml sample, you can define the order in which you want to display the application’s links to the user. You can also elaborate the name you want to show to the user. For more details on the different attribute you can refer to: https://www.ibm.com/support/knowledgecenter/en/SSGHJR_5.2.5/com.ibm.igi.doc/CrossIdeas_Topics/Advanced_Customizations/Custom_Realm_Desk/Custom_Desk.html
- Upload the application.xml at (create the directory structure for first time.): directories/properties/desk/console
- Restart IGI server.
- Configure the application in IGI either by configuring Enterprise connector or creating an application.
- If user has access to the given application, user will see that as an additional menu in IGI Service center.
- Here user Jean has access to two applications, she can see only those 2 applications in the order defined in the xml.
- User Alan has access to Service Now and Secure Systems
Page Urls:
https://www.ibm.com/support/knowledgecenter/en/SSGHJR_5.2.5/com.ibm.igi.doc/CrossIdeas_Topics/Advanced_Customizations/Custom_Realm_Desk/Custom_Desk.html