IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

IBM security identity manager account recertification query

  • 1.  IBM security identity manager account recertification query

    Posted Tue May 05, 2020 10:17 AM
    Edited by himanshu ranjan3 Tue May 05, 2020 10:50 AM
    Hi, I need one help. Could you please tell me if we have option in ISIM to run account re certification on selective services inside one particular business unit. We have one business unit and inside that we have 250 linux services and 2 windows domain controller. We are looking to run CBN only on few services based on our selection. As per my knowledge CBN will be trigger based on business unit and it will be applicable to all services inside that BU. Could you please help me on this option.

    I have gone through product documentation link here - https://www.ibm.com/support/knowledgecenter/SSRMWJ_7.0.2/com.ibm.isim.doc/admin/tsk/tsk_ic_services_acctrecert_recert.html

    Can this process will help me to recertify ids from selective service. Not sure if that will be positive or negative CBN and how approval flow will work.



    ------------------------------
    Himanshu Ranjan
    ------------------------------


  • 2.  RE: IBM security identity manager account recertification query

    Posted Tue May 05, 2020 11:02 AM
    Hi Himanshu...

    Yes ISIM allows you to configure Recertification policies for specific Services.  
    For Target Type you can select "Accounts"..after which you'll be prompted to select the Service Target(s)...where you can select which Services you'd like to recertify Accounts on.

    You could alternatively select Target Type of "Users", and can select Accounts (as well as Roles/Groups if you'd like).

    ------------------------------
    Grey Thrasher
    IBM
    ------------------------------