IBM Security Verify

 View Only
Expand all | Collapse all

Best Practice Question - Target system Decomission or disbale selective roles from Identity Provisioning system

  • 1.  Best Practice Question - Target system Decomission or disbale selective roles from Identity Provisioning system

    Posted Mon July 13, 2020 10:25 AM
    Hello 

    what are the best practices to be followed when we have to disconnect a Target system from IdM system Like ISIM. I am Looking for suggestions about the operational process that is recommended for IdM systems and not the Technical Process.

    The Question is what should be done with the Active Target system Users accounts that exist in the IdM system whe the Target System is disconnected or some of the selective roles are taken away..

    Thanks

    ------------------------------
    siva charan
    ------------------------------


  • 2.  RE: Best Practice Question - Target system Decomission or disbale selective roles from Identity Provisioning system

    Posted Sun July 26, 2020 07:15 AM
    I am afraid that it is impossible to give anything but very broad guidelines in such a case.
    If you think about it - everything is dependent on what the business (system owner ?) requires to happen - and that can basically be anything.
    My general advice is that you evaluate what is the expected target - assess your options (e.g. is it easier to do in the tool or directly on the system) - when that is don your should have the outline of activities you can put into a plan...

    HTH

    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------

    Original Message