IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IGI Standard or Custom Adapter

    Posted 01/29/21 12:12 PM

    Dear expert,

    could you please tell me which are the PROS & CONS for selecting CUSTOM or STANDARD adapter (e.g. LDAP for Target System) generically speaking?

    I just would like to understand if it is absolutely fundamental to keep the system as standard as possible (as generic best practice). Or if for this product it's always better to have more freedom on customizing a connector.

    Many thanks



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: IGI Standard or Custom Adapter
    Best Answer

    Posted 01/29/21 01:34 PM

    Hi. You may need to give more context. When you say "CUSTOM" are you talking about replacing the OOTB LDAP Adapter with an adapter you write for an LDAP repository? Or, customizing the OOTB adapter, somehow?



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: IGI Standard or Custom Adapter
    Best Answer

    Posted 01/29/21 02:00 PM

    Hello again David! It seems that there are only the two of us discussing about IGI here :D


    Sorry if i wasn't really clear enough.


    My question was exactly the one you mentioned first. I assume that using the LDAP standard adapter (i.e. IBM Security Identity Adapter for LDAP) should be better then creating a OOTB adapter for an LDAP (at least in terms of upgrading IGI version), but considering that may be the need to implement exceptions in the process in the future, I was wondering what were the pros & cons, generally speaking.





    #Support
    #SupportMigration
    #Verify


  • 4.  RE: IGI Standard or Custom Adapter
    Best Answer

    Posted 01/30/21 04:58 PM

    Hi, again, Andrea :-)

    Generally, writing your own custom adapter for LDAP will limit the support you get from IBM and you will need to maintain the adapter for upgrades, etc.

    The LDAP adapter that comes with IGI is actually the same adapter that ships with ISIM (if you are familiar with ISIM). The adapter has been around for 20 years and has a lot of mileage on it and many functional enhancements have been added over the years. The LDAP adapter has some extendability for customization. I have not seen anyone need to replace it with a custom LDAP adapter.

    I would first consider using custom IGI Rules in the LDAP Connector Rule Flow and the Target Queue Rule FLow to see if the desired customization can be achieved, before I would consider replacing the IGI LDAP adapter with a custom adapter

    David



    #Support
    #SupportMigration
    #Verify