Tivoli Identity Manager
@δΓU
4.5.0
SC40-1844-01
Tivoli Identity Manager
@δΓU
4.5.0
SC40-1844-01
:
bΩTΣΣúºeA²\¬ 37yNzñΩTC
G]2003 8 δ
© Copyright International Business Machines Corporation 2003. All rights reserved.
²
eÑ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vA∩H . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v
Tivoli Identity Manager °Aw . . . . . . . . . . . . . . . . . . . . . . . . . . . v÷y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vsuWy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi
≤Uuπ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vipnΘΣñ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi
1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Tivoli Identity Manager c . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1² . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Hz . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2zA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2 nJ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5yÑ∩ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5sKX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5OKX]KXLd/ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6jεLd/tm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6KX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
jε≤KX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7LKX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
3 @PS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9² . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9D\αϕ²C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9u@C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Θ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10í . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11KXz . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11bßz . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12[Jsbß . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13∩bß . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14°bß . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14bß . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15≤KX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Mµ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16°MµnDΩ . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
mñnD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17w¿nD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18HΩT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18eúv¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19sWeú . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19≤eú . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20∩∩eú . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
© Copyright IBM Corp. 2003 iii
KXLd/¬ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5 °i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21°i¼ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21@δ°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22@°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23A°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Q°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29bß°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30Ad-Hoc]M Crystal°i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Wⁿ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
iv Tivoli Identity Manager: @δΓU
eÑ
uIBM® Tivoli® Identity Manager °Av]Tivoli Identity Manager °AO@
zπwzuπCΓUíp≤ Tivoli Identity Manager
@δ\αMSC
A∩H
ΓUútd@Σ Tivoli Identity Manager bß@δ\¬C¬n
π≥ Web Ms²ºABαO⌡µµ@δ@C
y
ziH\¬ Tivoli Identity Manager wB yM÷yíAP y
±C∩wznyºßA\uWsyⁿC
Tivoli Identity Manager °Aw
Tivoli Identity Manager wñy]AG
v Tivoli Identity Manager uWU
w∩ Tivoli Identity Manager z@AúπXíuWíDDC
v UNIX® Windows® uTivoli Identity Manager °AwΓUv]
WebSphere WebLogicCAXz⌠C
ªú Tivoli Identity Manager wΩTC
v Tivoli Identity Manager Policy and Organization Administration Guide
ú÷ Tivoli Identity Manager z@DDC
v Tivoli Identity Manager °AtmΓU
úµ@°AMOº Tivoli Identity Manager tmtmΩTC
v Tivoli Identity Manager @δΓU
ú Tivoli Identity Manager ΩTC
v Tivoli Identity Manager °AN
ú Tivoli Identity Manager nwΘDAΣLíBíHΣLΣ
ΩTC
v Tivoli Identity Manager Troubleshooting Guide
ú Tivoli Identity Manager úΣLDMΩTC
÷y
ziHbUCyñΣ Tivoli Identity Manager ÷ΩTG
v Tivoli Software Library úFU Tivoli yApBΩu@ϕBdB⌡
MqHτCziqUC⌠o Tivoli Software LibraryG
http://www.ibm.com/software/tivoli/library/
v Tivoli Software Glossary ]t\h Tivoli nΘ÷NywqCziq Tivoli Software
Library ⌠¬ Glossary ño Tivoli Software Glossary]uσC
© Copyright IBM Corp. 2003 v
http://www.ibm.com/software/tivoli/library/
suWy
úuiΓíσ≤µív(PDF) uWσrOyÑv(HTML) ΓµíuW
yAú≤ Tivoli Software Library ñG
http://www.ibm.com/software/tivoli/library/
pGnbwñMΣúyA÷@U Library ¬ Product manuals CAb Tivoli Software Information Center WMΣ÷@UúWC
úy]ANBwΓUBΓUBzΓUHoΓ
UC
: FTOCL PDF yAb Adobe Acrobat uCLv°í]÷@U
> CLYXñA∩X∩C
≤Uuπ
úσ≤tUCSAiHUz≤UuπG
v σ≤ HTML M PDF ΓµíAi²Me¬C
v σ≤ñvúNσrAi²°FveC
pnΘΣñ
bp IBM Tivoli nΘΣñnDMDºeA² IBM Tivoli nΘΣ
ñ⌠A⌠pUG
http://www.ibm.com/software/sysmgmt/products/support/
pGzni@B≤UAQUC⌠ñ IBM Software Support Guide íΦ
kpnΘΣñG
http://techsupport.services.ibm.com/guides/handbook.html
úUCΩTG
v ¼Σn²MAD
v qXMqll≤]zbΩaw
v bpßΣñºeA ¼ΩTMµ
D
ΓUNw∩SϕⁿJM@AHw∩@twⁿOM⌠ Ah
DC
UOrΘDG
Θ ΘrNϕziH∩°í÷sBµBHXbΓU
ⁿO]deñⁿOhúC
ÑerΘ ÑerΘ¼σrANϕeBWⁿOΘXC
vi Tivoli Identity Manager: @δΓU
Θ ΘrNϕ⌠wqMApG
v ⌠ W
v W
v W
v sW
v t
v ⌠
% ± (%) Nϕ C Shell eú]XbΓUdñCz
t C Shell eúiαú@C
# ½ (#) Nϕw∩HW]¬svnJºπ
eúC
eÑ vii
viii Tivoli Identity Manager: @δΓU
1
IBM Tivoli Identity Manager úFHíph≥ªMΦnΘMA
CTivoli Identity Manager ib¼°⌠UObΩ°ñAú
uB]M±ºísvA≤UqNyC
bz]wuvHpuµvBu±vMumvÑlqΩΘ
]pnºßAnsWuHvCziH uñΓvMuITIM svC
AziHNuHvⁿúuñΓvMuITIM svCAO uAvA
AiHsúP¼ⁿzΩAO OracleBWindows NT® ÑÑCuñΓv
iHzLhBuAvAH\UuñΓvuHv
suAvⁿzΩCuITIM sviHs Tivoli Identity Manager
°AAªOQ ACI ª Tivoli Identity Manager vQABⁿúuITIM
svHYio QvQC
Tivoli Identity Manager c
HUO Tivoli Identity Manager tp≤B@≥[C
uHv[JuvHuvlqΩΘñC
© Copyright IBM Corp. 2003 1
@HiHⁿú@uñΓvAñΓzLuhvßuⁿz
ΩvsvAuhvh]wHbsuⁿzΩvπ
vQC
uITIM v]iHⁿúuITIM svAszL ACI \αAN
svß Tivoli Identity Manager °AC
Y H]q u@ ⁿúutzvAΣπhº
Tivoli Identity Manager \αsvC
²
C@uD\αϕ²Cvi²ze÷a² Tivoli Identity Manager tC
ziHQt¬u@C∩AsCuD\αϕ²Cv∩
\αC
Tivoli Identity Manager tO @huv¿Auvi]tlqΩ
Θ]puµvBumvMu±vAo úsb!/l÷
YñCC@ Tivoli Identity Manager ΩΘúiH]tHAziHNHⁿú
uITIM svMuñΓvCziHⁿúutzvñΓn Tivoli
Identity Manager \αd≥ºπsvHC
z
zOQuD\αϕ²CvWuv⌡µCϕz÷@U
A¬Yπuvu@CCu@CπzibΣlqΩ
Θ⌡µ\αAHbMΣLΩΘ]tHC
ϕz÷@UuvATivoli Identity Manager π@ΓíµC¬í
µπuvMµAΣµíiHi/¼XAπlqΩΘCziHo≈
Mµ∩ΩΘCkíµhπΩΘ]BmBµB±
uHv]w∩∩ΩΘMµC
⌠≤lqΩΘúiHOuvlqAO⌠≤ΣLΩΘlqClqΩ
ΘÑhS⌠≤¡εA±ΦíAumviH]tΣLumvAuµv
iH]tΣLuµvH⌠≤ΣLlqΩΘCuv TwOÑh
WhC
Hz
ϕzsWHAz NL ±iuvΣLxsñApuµvB
u±vBuzΓvumvCbNH[JuvΣLxs
ºßANiHuvHuAvA²L α≈sⁿzΩAΣñ]A Tivoli
Identity Manager °AC
2 Tivoli Identity Manager: @δΓU
zA
ziHsWAuvñAp Y²HπsAαOCAO@
ⁿzΩAp Windows NT® ServerBMS Exchange ServerA!O Tivoli Identity
Manager °ACϕ\sⁿzΩNy (provisioning)C ≤ Tivoli
Identity Manager °A]OΣñ@izAA] HnAAY
uOsMzv Tivoli Identity Manager bßMHΩTCpG%YH
uITIM AvAHNLvs Tivoli Identity Manager ñ⌠≤vΩTCp
GuvFYHAAHNvso AC
AúαHAuαuñΓvCpGHnSwAsvA
H ⁿúAYuñΓvC
¡uTivoli Identity Manager vHAuαzLⁿúuITIM svF
oCuITIM svzLusεΩTv(ACI) íAQU¼s
vCusεΩTv íwqT≤G
v uITIM sv\α¼
v n⌡µQº\αuvlqΩΘ¼
v n⌡µQº\αÑhh
1 # 3
4 Tivoli Identity Manager: @δΓU
2 nJ
unJv í%≥vHLks Tivoli Identity Manager tA²zα≈s
≥ovd≥ABpGzúOoKXAªúFuOKXvC
nnJ Tivoli Identity ManagerAz ΘJ ID MKXCtzbß
¿zd⌠vQCzKX XKXWhC
nJ Tivoli Identity Manager:
1. ΘJu IDvAMß÷@U Tab Σ!uKXvµC
2. ΘJuKXvAMß÷ Enter Σ÷@UnJC
yÑ∩
Tivoli Identity Manager i²∩nb Tivoli Identity Manager ty
ÑC
≤yÑ:
1. ÷@UunJv¬Uñ∩t@yÑC
ouyÑ∩vC
2. ÷@UyÑC
Tivoli Identity Manager °Atm¿∩yÑA½sπunJvC
3. nJtDtC
pGzOQµ@nJ\αnJABn∩yÑAb⌠ß[W
/languageC±ΦíAΘJG
https://mysite.myco.com/itim/enrole/language
pGntm Web s²ºyÑw]ΩTA\ Tivoli Identity Manager °
AtmΓUC
sKX
bsWHbߺßAtQHΩTO²ñqll≤AzLqll≤
qHCtiHtm¿²H¼qll≤ñA]tHXπbßK
XAO@ URL Mµ÷ ID XC
UCíp≤Q URL Mµ÷ IDAsKXC α≈úu@
KXvA$αsKXC
sKX:
1. ÷@Uqll≤ñπ URLAπuKXvC
ouKXvABuµ÷ IDvµñ±Jqll≤ñú
uµ÷ IDvXC
2. bu@KXvσrµñΘJ@KXAMß÷@UeXC
© Copyright IBM Corp. 2003 5
ouKXvC
3. OUKXAMß÷@U¿C
o÷¼uKXvC
½n: OUKXA]oúiAC
OKX]KXLd/
pGOKXA%MiH Ta¬uKXLd /vDA
nJtCb¬Ld/DºßATivoli Identity Manager t
tmAHUCΣñ@ΦíG
v inJtA²QjεY≤KXC
v ¼@qll≤AΣñ]tσrsKXC
v ¼@qll≤AΣñ]t@AiQ@KXsKXC
uKXLd/vSnJ:
1. bunJWvµñΘJnJWC
2. ÷@UunJvWOKXHC
: pGuKXLd/vSwAXUCTºG
KXLd/ewC
ó Identity Manager tz
HoΩTC
3. ¬Ld/DAMß÷@UeXC
tHUíΣñ@ttmG
v inJtA²QjεY≤KXC
v ¼@qll≤AΣñ]tσrsKXC
v ¼@qll≤AΣñ]t@AiQ@KXsK
XC
jεLd/tm
uKXLd/vSApGOKXA%M\s Tivoli
Identity Manager tCpGuKXLd/vSwANnpt
zAo Tivoli Identity Manager tsvC
úuKXLd/vSO@Oºß$∩Aún]wΣ∩
uKXLd/vDCuLdív¼AiαnwqLd
úo LdA∩Ldú∩LdAOúe
LdC
ϕC@úAtmuKXLd/vSC
KX
pG Tivoli Identity Manager °Atm¿Hqll≤H@sK
XA α≈ú@KXA$αsKXC
KX:
6 Tivoli Identity Manager: @δΓU
1. ÷@Uqll≤ñπ URLAπuKXvC
ouKXvABuµ÷ IDvµñ±Jqll≤ñú
uµ÷ IDvXC
2. bu@KXvσrµñΘJ@KXAMß÷@UeXC
ouKXvC
3. OUKXAMß÷@U¿C
o÷¼uKXvC
½n: OUKXA]oúiAC
½n: bsKXºßAzYnJ≤KXCbz÷@U¿º
ßAµ÷ ID NúAA] zNLkA sKXC
jε≤KX
iHb@sbßnJ Tivoli Identity Manager °AtAObU@
bßnJAjε≤KXC
: oSA≤ Tivoli Identity Manager bßC
njε≤KXbnJºßAYiJjε≤KX > ≤KXCb
≤KXºeAúLks Tivoli Identity Manager tñ⌠≤SC
LKX
ziH∩KXR¡]w@¡εCo]w≤G
tm > e > KX¡
≤KXíLnjε≤KXbnJºßAYiJjε≤K
X > ≤KXCb≤KXºeAúLks Tivoli Identity Manager t
ñ⌠≤SC
2 nJ 7
8 Tivoli Identity Manager: @δΓU
3 @PS
π Tivoli Identity Manager t@ @PSCo S]A²\α]uD
\αϕ²CvMu@CHΘSC
²
² Tivoli Identity Manager tDn\αpUG
v D\αϕ²C
v u@C
v ≡
\HUUAHoC@²\αΩTC
D\αϕ²C
uD\αϕ²Cv≤C@AΣπHU∩G
v
v °i
v í
o ∩i²t Tivoli Identity Manager tSwC
: tñµmπb²⌠ ñC@WC²⌠ eHU&yGzmG
u@C
u@CµW≤tuvBuvBuvMu°ivC@
¬ABπuD\αϕ²CvñC@DDΣLlC
UϕπC@uD\αϕ²CvDDiu@C∩C
D\αϕ²CDD u@C∩
zKX
zbß
sMµ
°mñnD
°w¿nD
sHΩT
eúv¡
KXLd
°i ⌡µ°i
εs
]p⌡
]p°i
PBΩ
© Copyright IBM Corp. 2003 9
D\αϕ²CDD u@C∩
í Siu@C∩
Θ
ΘO≤owΘMíCziH∩≤TΩΘMíAO∩
uYvΦYl≤C
b∩ºßA÷@UeXHiµBzCϕ૨πzw∩ΩΘMµA
ziαn÷@U½sπz≤sb°C
í
uD\αϕ²CvñuívDDbt@°íñ Tivoli Identity Manager °
AuWíCuWíúF Tivoli Identity Manager tñºMS÷Ω
TC
C@]úi!uWíWUσ÷CoO≤C@kWñ
sC
10 Tivoli Identity Manager: @δΓU
4
uvi²°sΦA≤L ¡ΩTC⌠≤Qsvi
°Σ¡ΩTHAúiHuvqzHΩTM@C
uvqi²G
v zΣbßKX
v zΣbß
v suMµv
v °ΣmñMw¿nD
v sHΩT
v eúv¡ΣL
v ]wΣuKXLdv¬
\∩AHoC@u@C∩÷ΩTC
KXz
zizLuvu@CñuzKXv∩uvuKXzv
qCoqi²q@mzΣbßKXC
uzKXvπHUµMSG
µW µ¼ í
sKX σrµ ΘJsKXσrµC
TKX σrµ TKXσrµC
KX ∩ MwtObßús
KXC
pG∩o∩AtYbß
úsKXANsKX
ΩTHqll≤HPbß÷p
C
uΘv∩µ U\αϕ∩]Y MwsKXΘPí∩µ
CΣL÷ΩTA\ 10
yΘzC
Aϕµ σr CXΣbßACϕµ
¡µC\UϕHouAv
ϕµΩTC
eX ÷s eX≤tC
½] ÷s NW½]tñex
sC
°XKXWh W @AπCXºA
KXWhXC
© Copyright IBM Corp. 2003 11
uAvϕµCXΣbßACUϕíuAvϕµñC@
µG
µW í
]∩ pG∩A≤M∩Ab
ßC
Wh oµSwAKXW
hC
A AWC
nJ ∩AnJ IDC
¼A bß¼AC
≤KX:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzKXC
ouzKXvC
3. busKXvσrµñΘJsKXAbuTKXvσrµñTK
XF∩u KXv∩C
pG∩u KXvATivoli Identity Manager úKXAHqll
≤NKXHPbß÷pC
4. ∩ΘMíA∩uYv∩C
5. ∩zn≤ΣKXºA∩C
6. ÷@UAu°vATKXX∩wAKXWhC
pGQn≤hAKXAiH÷@U°XKXWh
AHdC@KXWh¡ε(≤C
7. ÷@UeXC
eX≤≤wíC
bßz
zizLuvu@Cñuzbßv∩uvubßzv
qCoqi²q@ñmzΣbßC
ubßzvπUCG
µW í
∩ ∩CbεCñbßC
X¼A ⁿwbßOXµhC\UϕH
oXXMíC
ID C@bß IDC
AW bßAC
¼A bß¼AC
uX¼AvO (Xº@ϕCC@XúΣvwqCUϕíC
@XXC
12 Tivoli Identity Manager: @δΓU
X¼AX í
ϕbßXuhvCo
i∩¿π±OCoW
acct_compliant.gifC
u≤@bßCoXϕí%
⌡µhdCqbßúoXC
iϕbßiHsbA²@hbß
úXhC
úXϕΓ¼pº@G
v úiHⁿwΩsvABbß]úsbC
v Ω%wquhvC
bßiHu IDvBuXvu¼AvC
ziH÷@Ubß IDAπMbß÷ΩTCbß⌠≤≤úiH
wYAOw≤%í$C
ubßzvú⌡µUC@∩G
v [JsbßuAv
v ∩bß
v ]εbß
v °]Rúbß
v ]½sbß
v ≤KX
[Jsbß
≥viHL vNsbß[JAñC
[Jsbß:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzbßC
oubßzvC
3. ÷@UsC
ouAvC
4. ∩n[JsbߺAΩsAMß÷@U≥C
ousAvCoWπµ°∩ºA
¼wC
5. beW±JAΩC
: pG∩uUnJ≤KXHv∩Aϕ@nJtANn≤KXC
6. ÷@UeXC
ouΘJKXvHu∩Θ/ívC
4 13
7. ΘJbßKXAMßbuTKXvσrµñTKXC
XKXWhAhKXNúQⁿC
8. ∩ΘMíAMß÷@UeXC
\ 10 yΘzAHoΩTC
teXnDA½sπubßzvC
9. ÷@U½sπz½sπzϕµC
∩ bß
≥viHqubßzv∩Σñ@bßC
∩ bß:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzbßC
oubßzvC
3. ÷@Un∩bßWC
ou∩bßvC
4. D≤bßΩTAMß÷@UeXC
: u IDvO nµAB ±J$α≥⌡µC
pG∩uUnJ≤KXHv∩Aϕ@nJtAN
n≤KXC
ouΘJKXvHu∩Θ/ívC
5. ∩≤ΘMíAO∩uYv∩C
\ 10 yΘzAHoΩTC
6. ÷@UeXC
teXnDA½sπubßzvC
pGnbßA\ 15 ybßzC
7. ÷@U½sπz½sπzϕµC
°bß
≥viHqubßzv°vbßCbß
°bßAbßYLknJ Tivoli Identity Manager tCúLAbß
úqtñRúC°bßhq Tivoli Identity Manager tñRúbßC
°bß:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzbßC
oubßzvC
3. ∩zn°ºbß∩C
4. ÷@U°÷@UC
ou°AvuAvA°z∩wC
5. ∩ΘMíAO∩uYv∩C
14 Tivoli Identity Manager: @δΓU
\ 10 yΘzAHoΩTC
6. ÷@UeXC
teXnDA½sπubßzvC
pGnbßA\ 15 ybßzC
bß
≥viHqubßzvvwbßCbbßAz
ΘJ sKXC
bß:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzbßC
oubßzvC
3. ∩znºbß∩AMß÷@UC
uwbßiHQC
4. ΘJsKXAMßTKXF∩KX∩C
pGz∩u KXvATivoli Identity Manager zúKXAHqll≤
NKXHPbß÷pC
5. ∩ΘMíAO∩uYv∩C
6. ÷@UeXC
teXnDA½sπubßzvC
7. ÷@U½sπz½sπzϕµC
≤KX
uITIM viHqubßzvOuzKXvA≤ΣbßKXC
\q@mzΣbßANiH@]whbß
KXCúLApGsKXúXC@AKXWhAnDNóABKXN
úCbsKXnJΩºeA²TnDwQ
¿CiHbuw¿nDvW°nDGC]\ 18 yw
¿nDzAHoΩTC
zLubßzv≤KXMzLuzKXv≤KXQⁿC]
\ 11 yKXzzAHouzKXvΩTC
≤bßKX:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñzbßC
oubßzvC
3. ∩zn≤ΣKXºbß∩AMß÷@U≤KXC
oubßz≤KXvC
4. busKXvσrµñΘJsKXAbuTKXvσrµñTK
XF∩u KXv∩C
4 15
pGz∩u KXvATivoli Identity Manager zúKXAHqll≤
NKXHPbß÷pC
5. ∩ΘMíA∩uYv∩C
\ 10 yΘzAHoΩTC
6. Tw∩zn≤ΣKXºbß∩C
7. ÷@UAu°vATKXX∩wAKXWhC
pGzQn≤hAKXA÷@U°XKXWhAHdC@
KXWh¡ε(≤MµC
8. ÷@UeXC
teXnDA½sπubßzvC
Mµ
uITIM viHbuMµv°¿wⁿúL @Co
@iHOnDπOnDΩTCuMµvñCX@Ou
@y@íAo nuITIM vA$α≈Aϕa¿C
uMµvi²πBBñεúnD÷ΩTCeXs
@ºßAz]iH½sπzuMµvAHπs@
CnDπΩTq O tñt@úC
: n nDπnDQπCpGnhWv¡AhuenDvεCnD$QπCnD ¼ΣLWv¡]u
@y]pnDπA$α¿nDC
C@@π÷ΩTpUG
µW í
nD ID PnD÷pµ÷XC
@ nD@¼C
eXΘ eXnDH⌡µY@@ΘC
QnD nD@WC
DD MnDDD÷ΩTC
¼A nDµ¼AC
oiH÷C@µñΩTC
¿@:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñsMµC
ouMµvC
3. ∩GziH÷@UµWbYAA∩Aµ
uMµvC
4. ∩GziHqu¼vU\αϕñ∩nD¼AπSw¼nDC
5. ∩GziH÷@UºunD IDvu°ΩvA°º
@ΣL÷ΩTC
16 Tivoli Identity Manager: @δΓU
ounDΩvC
6. ∩GziH÷@U°AuMµvC
7. w∩n¿A÷@Uu@vµñC
pGOuπ/vnDAhuπ/nDvC
8. n¿@¼A¿UCΣñ@@G
v π/nD
a. ∩uπvΩsC
b. ∩GbuívσrñAΘJMªíC
c. ∩GziH÷@U°nDΩAHonDΣ]w÷ΩTC
d. ÷@UeXC
teX½sπuMµvC
v úΩTnD
a. únDΩTC
b. ÷@UeXC
teX½sπuMµvC
°MµnDΩ
iHH°uMµvñAPnD÷ΩC
°mñnD÷Ω:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñsMµC
ouMµvC
3. ∩G ziH÷@UµWbYAA∩Aµ
nDC
uMµv½sπzANnD∩C
4. ÷@UzndΣΩºnDu°vC
ounDΩvC
5. ∩]tzndºΩTC
6. ÷@U⌠≤W°AuMµvC
mñnD
uITIM viHbumñnDvñ°weX Tivoli Identity Manager
tA²bt%¿nDCϕz°umñnDvA
w÷@U½sπzAHM°QúXsnDHw¿nDC
mñnDiH÷UCµG
v nD ID
v eXΘ
v ¼
v nD
v QnD
4 17
v DD
v ¼A
w¿nD
uw¿nDvπΘw¿nDCiH÷@UC@µ
bYAC@µΩTCpGn°C@nD÷
ΩA÷@U¬unD IDvu°vC
: pGn Tivoli Identity Manager πΩTAuLonDv∩CuL
onDv∩i²uΘvBunDvBuQnDvunD
¼vLoπΩTC
Fuw¿nDv:
1. ÷@UuD\αϕ²CvñC
2. ÷@U°w¿nDC
HΩT
pGzO Tivoli Identity Manager zºbßAhuHΩTvq]t
Pz÷ΩTC
uHΩTvϕµiH tzqCw]uHΩTvϕµCXHU
G
µ í
HΩT m≤ bßm≤C
W bßWCobHW
UñObßC
Wr bßWrC
Wr@r! bßWr@r!C
ϕaa bßϕaaC
@KX bßsbßKXK
XCpG Tivoli Identity Manager °A
tnbßúlKXAoO
nC
ñΓ bßñΓC
qΩT yX bßymX]q
qyϕC
us bßusC
bßu@C
bß C
lHa bßqaC
bßmW]pGAC
18 Tivoli Identity Manager: @δΓU
µ í
qTΩT qll≤ bßqll≤]q Ob
ßWr@r!Mm≤C
tQªNnDMΣL@qb
ßC
qX bßXC
µqX bßqµqXC
Is bßqIsXC
ϕaq bßϕaqXC
OW bßΣLOWCTivoli
Identity Manager o±∩
zbßbⁿzΩW IDC
ΘJHΩT:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñsHΩTC
ousHΩTvC
3. D∩uHΩTvBuqΩTvHuqTΩTvWΩ
TC
4. ÷@UeXC
: ziHbuHΩTvWsWuñΓvAp YßY@uñΓvº¿Ωµ\º⌠≤uⁿzΩvsvC
eúv¡
ziHueúv¡vⁿúneúzπv¡HCo≤nD
πABOnDñ@úΩTBJC
ziH∩heú∩HA²P@qíúieúhHCpGzn≤Yqíe
úHAz ²RúHAAw∩∩wq[JsHC
sWeú
eúv¡:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@Cñeúv¡C
oueúv¡vC
3. ÷@UsWC
4. QujMvSΣXYHAMß∩HmW∩AA÷@Us
WC
5. ∩nNzπv¡eúHlΘM⌠ΘC
6. ÷@UeXC
4 19
≤eú
≤Y@íeúH:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@Cñeúv¡C
3. ∩eúW∩AMß÷@URúC
ouTRúvC
4. ÷@UeXC
eúYqeúMµñúC
5. usWeúv[JqseúHC
∩∩eú
≤ eúí:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@Cñeúv¡C
3. ÷@Uzn≤HmWC
4. ≤ul/⌠ΘvC
5. ÷@UeXC
KXLd/¬
uITIM viHH∩ΣuKXLd/v¬CpGhuKXLd/
vDnú¬AziH≤Σñ@¬Aú∩ΣL¬C
w]AoSOCpGz∩o∩²oSwAWX
@hTºAⁿXoSewCúLApGFoSAzNiHH
U∩uKXLd/v¬C
∩uKXLd/v¬:
1. ÷@UuD\αϕ²CvñC
2. ÷@Uu@CñKXLdC
ouLdvC
3. ∩ºLd/D¬AMß÷@UeXC
tYxsLd/²C
20 Tivoli Identity Manager: @δΓU
5 °i
≥viHQ Tivoli Identity Manager °itA∩ h °
iCTivoli Identity Manager i²≥vúHUúP¼°iG
v @
v A
v
v
v
v
v bß
v SO
½n: z w Adobe Acrobat ReadertmA$α°°iC°iúH PDF
µíeCz] Internet Explorer 5.5 ]t Service Pack 2
≤sAO Netscape 4.75 C
°i¼
Uϕí Tivoli Identity Manager ñi°i¼CúLASwi°i
° ITIM s¿ΩµwC
°iW í
@ @¼BΘBnD@HHnD@∩HACX
Tivoli Identity Manager @nDC
ošiiHwqUCG
v nD
v QnD
v @
v lΘ
v ⌠Θ
A ΘBnD@HHnD@∩HACXA
ΩC
ošiiHwqUCG
v nD
v QnD
v AΩ
v lΘ
v ⌠Θ
© Copyright IBM Corp. 2003 21
°iW í
ΘBnD@HHnD@∩HACX Tivoli
Identity Manager @C
ošiiHwqUCG
v nD
v QnD
v lΘ
v ⌠Θ
ΘBnD@HHnD@∩HACXQn
DC
ošiiHwqUCG
v AΩ
CXW⌡µºßAΣtbßC
ošiiHwqUCG
v AΩ
CXb∩w,úSíAC
ošiiHwqUCG
v AΩ
v Aw,
bß CXHΣ÷bßAHbßOXµhC
ošiiHwqUCG
v AΩ
v Aw,
SO ⁿw°i]pH]p/X°iC
HUMµ]AibSwAΩW⌡µ°iG
v A
v
v
v bß
v SO
HUUíU°i¼C
@δ°i
ITIM bßC@úiH°°iCúLAúDuITIM sv
Q°i ACI Qⁿw°isvAhNLk⌠≤°iC]
α≈dL v°⌠≤q°iCziH]wSw°i ACIATa
Sw¼º°isvA¡εUúPα≈°iC
22 Tivoli Identity Manager: @δΓU
@δuα@δ]QnDOnDSwí°iC±
ΦíAgzuα°LlnDO∩LúXnD°iC²OApGuúπ
z¡AhLuα°∩LúXnD°iA]OLúαlnDC
@°i
u@°ivπnD Tivoli Identity Manager @BnD@HHnD
@∩HC°iiHw∩tO@SwtAπS
w@nDCAziHnD°iπXn⌡µnDº@HAO
u∩@H°n⌡µ∩w@nDCz]iHΘJΘd≥Auπ¿b
d≥@nDC
Uϕíi¡ε°ijMµG
nD nDOⁿlnDCpG%∩n
DATivoli Identity Manager w∩∩wA
jMtC
QnD QnDOunQsWB∩Rú
CpG%∩QnDATivoli Identity
Manager w∩∩wAjMHC
: Tivoli Identity Manager ujMπ∩w
AºΩHC
@ bú°iATivoli Identity Manager jM
@¼CoOnC
i@¼pUG
v sW
v A
v bßKX≤
v bß
v bß
v Rúbß
v Ω≤
v BU ≤
v
v
v Rú
v ≤bß
l/⌠ΘMí ¡ε°iΘPíd≥C°iñu]t
b∩wΘ/íd≥@ñuAΩ
vC
úu@°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@U@°iC
5 °i 23
ou@°ijMvC
4. ∩G∩nDC
a. ÷@U...o ITIM C
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩ΩsAMß÷@UsWC
t½sπu@°ijMvAB∩nDCbunDvµ
ñC
5. ∩G∩QnDC
a. ÷@U...oHC
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩HΩsAMß÷@UsWC
t½sπu@°ijMvAB∩QnDCbuQnD
vµñC
6. qu@vU\αϕñ∩@¼C
7. qOU\αϕñ∩δBΘB(MíA∩lH⌠ΘPíC
8. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
9. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
A°i
uA°ivΣL°i∩ hACXuAΩvC°iu
π¿buΘ/íd≥vA ∩wutv]utv
nDuAΩvAH∩u∩wHv]uHv@ñuAΩ
vC
Uϕíi¡ε°ijMµG
nD nDOⁿlnDCpG%∩nDATivoli
Identity Manager w∩∩wAjMtC
24 Tivoli Identity Manager: @δΓU
QnD QnDOunQsWB∩RúCpG%∩
QnDATivoli Identity Manager w∩∩wAjM
HC
: Tivoli Identity Manager ujMπ∩wAº
ΩHC
AΩ oOnCuAΩvOⁿ Tivoli Identity Manager ñi
AAOⁿAOΩ]pGAhΩ
C
l/⌠ΘMí ¡ε°iΘPíd≥C°iñu]tb∩wΘ/
íd≥@ñuAΩvC
úuA°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@UA°iC
ouA°ivjMC
4. ∩G∩nDC
a. ÷@U ...o ITIM C
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩ΩsAMß÷@UsWC
t½sπuA°ijMvAB∩nDCbunDvµ
ñC
5. ∩G∩QnDC
a. ÷@U...oHC
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩HΩsAMß÷@UsWC
t½sπuA°ijMvAB∩QnDCbuQnD
vµñC
6. ∩uAΩvC
a. ÷@U...oAC
ouAjMvC
5 °i 25
b. qu∩]wvU\αϕñ∩A]wC
c. ∩u¡∩wv∩Aub∩wjMC
d. qujMvU\αϕñ∩jMC
e. qu∩ϕívU\αϕñ∩jMLo°≤C
f. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
g. ∩AΩsAMß÷@UsWC
t½sπuA°ijMvAB∩ACbuAΩvµ
ñC
7. qOU\αϕñ∩δBΘB(MíA∩lH⌠ΘPíC
8. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
9. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
°i
u°ivCXnD Tivoli Identity Manager @BnD@HH
nD@n@∩HCziH∩nπtnDAO@Sw
tnDCAziHqutvOq@u∩wt
vAnD°iπXn⌡µo nDHAOu∩@H°
HnDCz]iHΘJΘd≥Auπ¿bd≥@nDC
Uϕíi¡ε°ijMµC
nD nDOⁿlnDCpG%∩nDATivoli Identity
Manager w∩∩wAjMutvC
QnD QnDOunQsWB∩RúCpG%∩Qn
DATivoli Identity Manager w∩∩wAjMH
C
: Tivoli Identity Manager ujMπ∩wAºΩ
HC
l/⌠ΘMí ¡ε°iΘPíd≥C°iñu]tb∩wΘ/í
d≥@ñuAΩvC
úu°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@U°iC
ou°ijMvC
4. ∩G∩nDC
26 Tivoli Identity Manager: @δΓU
a. ÷@U...o ITIM C
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩ΩsAMß÷@UsWC
t½sπu°ijMvAB∩nDCbunDv
µñC
5. ∩G∩QnDC
a. ÷@U...oHC
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩HΩsAMß÷@UsWC
t½sπu°ijMvAB∩QnDCbuQnD
vµñC
6. qOU\αϕñ∩δBΘB(MíA∩lH⌠ΘPíC
7. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
8. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
Q°i
uQ°ivCXQ Tivoli Identity Manager nDCziH∩nd
Q@FO∩SwtAud∩tQ
@Cz]iH∩ud⌡µ@ºSwHQ@CúO@¼
pAun Tivoli Identity Manager @XnD/QnD hAhú@¼
≤Ao @úπb°iñC
Uϕíi¡ε°ijMµG
nD nDOⁿlnDCpG%∩nDATivoli Identity
Manager w∩∩wAjMtC
5 °i 27
QnD QnDOunQsWB∩RúCpG%∩Qn
DATivoli Identity Manager w∩∩wAjMH
C
: Tivoli Identity Manager ujMπ∩wAºΩ
HC
l/⌠ΘMí ¡ε°iΘPíd≥C°iñu]tb∩wΘ/í
d≥@ñuAΩvC
úuQ°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@UQ°iC
ouQ°ijMvC
4. ∩G∩nDC
a. ÷@U...o ITIM C
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩ΩsAMß÷@UsWC
t½sπuQ°ijMvAB∩nDCbunD
vµñC
5. ∩G∩QnDC
a. ÷@U...oHC
oujMvC
b. ∩u¡∩wv∩Aub∩wjMC
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩jMLo°≤C
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩HΩsAMß÷@UsWC
t½sπuQ°ijMvAB∩QnDCbuQn
DvµñC
6. qOU\αϕñ∩δBΘB(MíA∩lH⌠ΘPíC
7. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
28 Tivoli Identity Manager: @δΓU
8. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
°i
u°ivCXUCΩTG
v tbß
v bß
v ≤sbß
v úbß
v Bzbß
v w≤ºHMbßMµ
úu°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@U°iC
ou°ivjMC
4. ∩uAΩvC
a. ÷@U...oAC
ouAjMvC
b. qu∩]wvU\αϕñ∩A]wC
c. ∩u¡∩wv∩Aub∩wjMC
d. qujMvU\αϕñ∩jMC
e. qu∩ϕívU\αϕñ∩jMLo°≤C
f. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
g. ∩AΩsAMß÷@UsWC
t½sπu°ijMvAB∩ACbuAΩvµ
ñC
5. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
6. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
°i
u°ivCXbwq,%ⁿwAbßAHq%L
bßC
5 °i 29
Uϕíi¡ε°ijMµC
AΩ oOnCuAΩvOⁿ Tivoli Identity Manager ñi
AAOⁿAOΩ]pGAhΩC
w oOnC∩wAbßw,C
úu°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@U°iC
ou°ivjMC
4. ∩uAΩvC
a. ÷@U...oAC
ouAjMvC
b. qu∩]wvU\αϕñ∩A]wC
c. ∩u¡∩wv∩Aub∩wjMC
d. qujMvU\αϕñ∩jMC
e. qu∩ϕívU\αϕñ∩jMLo°≤C
f. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
g. ∩AΩsAMß÷@UsWC
t½sπu°ijMvAB∩ACbuAΩvµ
ñC
5. buw,vσrµñAΘJnjM,C
6. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
7. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
bß°i
ubß°ivCXHΣ÷bßAHbßOXⁿwµMΣlµ
µhC
Uϕíi¡ε°ijMµC
AΩ oOnCuAΩvOⁿ Tivoli Identity Manager ñi
AAOⁿAOΩ]pGAhΩC
30 Tivoli Identity Manager: @δΓU
µ oOnCuµvOCXMΣ÷bßS
wµCiⁿwµ¼pUG
v zΓ
v H
v m
v
v µ
úubß°iv:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. ÷@Ubß°iC
oubß°ivjMC
4. ∩uAΩvC
a. ÷@U...oAC
ouAjMvC
b. qu∩]wvU\αϕñ∩A]wC
c. ∩u¡∩wv∩Aub∩wjMC
d. qujMvU\αϕñ∩jMC
e. qu∩ϕívU\αϕñ∩jMLo°≤C
f. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
g. ∩AΩsAMß÷@UsWC
t½sπubß°ijMvAB∩ACbuAΩvµ
ñC
5. ∩uµvC
a. ÷@U...oµC
oujMvC
b. qu∩¼vU\αϕñ∩µ¼C
c. qujMvU\αϕñ∩jMC
d. qu∩ϕívU\αϕñ∩ϕíC
e. bσrµñΘJjMAMß÷@UjMC
oujMLoGvC
f. ∩AΩsAMß÷@U≥C
t½sπbß°iujMvAB∩µCbuµ
vµñC
6. ÷@UeXC
t∩jM hú°iC°iQ Adobe Acrobat Reader π
C
5 °i 31
7. pGnN PDF µí°ixsß≈A÷@U°i°íuπCñxs
CbY ípUAuWvµñπw]WiαOLW
].hr(Cs²znxso²AMßbuWvµñ
½sΘJWC÷@UxsC
Ad-Hoc]M Crystal°i
SO°idYQOu°i]pív mAOq≤Ot°i]p
í]p Crystal ReportsJCAAd-Hoc °iq Tivoli Identity Manager
#⌡µC
tziHw∩nq°iCAd-Hoc °itπµ°i
cúPC
úMxs Ad-Hoc °i:
1. ÷@UuD\αϕ²Cvñ°iC
2. ÷@Uu@Cñ⌡µ°iC
ou°i\αϕvC
3. qMµñ∩q°iC
4. ⁿw°iµí (PDF/CSV)C
: w∩ Tivoli Identity Manager Ad-Hoc °i#]p°iAXo∩
C
5. ΘJú°iΘJΩ]pGAC
: w∩ Tivoli Identity Manager Ad-Hoc °iAΘJϕuM SQL d
ⁿykWhC±ΦíApGnoH J YHmWAhΘ
J J% úO J*C
: pGO Crystal ReportAΘJϕu WϕíykC±ΦíA
pGnoH J YHmWAhΘJ J*C
6. ÷@UeXC
p YH∩µíúπ°iC
7. pGnN PDF µí Ad-Hoc °ixsß≈A÷@U°i°íuπCñ
xsCbY ípUAuWvµñπw]WiαOL
W].hr(Cs²znxso²AMßbuW
vµñ½sΘJWC÷@UxsC
pGnN⌠≤ⁿΣµí Crystal Report xsß≈A°iΘX
ñX∩X Crystal ReportCMßAxs°iC
32 Tivoli Identity Manager: @δΓU
Wⁿ
T
u@y (workflow). ÷°⌡µíC
w¿nD (completed requests). wgeXtABwg¿nDC
Σ (branch). ≡¼cñC@hAú@ΣC≡¼cñC@ΣAú úPⁿ
XCziH÷@UlµΣΣ[ (+)A°Σ
eC
¡
@KX (shared secret). @[KAΣO
lKXAs Tivoli Identity Manager tC
oObHΩTⁿJtwqC
Xⁿ (join directive). @WhAoWhiwqϕΓΓHWho≡Ap≤Bz
C
s (access). xsbqútWΩTΩMvC
C
m (location). iH[Jñ@lqΩΘCq
AmOHΦΦíazmAiµ
zC
@ñbß (active account). @sbBe sΩbßC
@°i (operation report). o≈°i@¼BΘBnD@HHnD@∩HACX Tivoli
Identity Manager @nDC
OW (alias). @¡Aq Oⁿ IDC
@HiHnXOWApGGSmith M GWSmithC
¡Oh (identity policy). Tivoli Identity Manager
twqp≤ ID WhC
K
(user). Pt¼@⌠≤HC
(user interfaceAUI). Pt¼
πeC
W (user name). st IDC
o ID ]iHw∩tOAB²t
bUñΓM ITIM sñ¿ΩµAMw
svC
°i (user report). o≈°iΘBnD@HHnD@∩HACX Tivoli
Identity Manager @C
eú (delegate). oHQⁿwtdπt@nDAw∩t@nDúΩTC
D@ñbß (inactive account). sb≤tñA²ebßúbñbßC
E
Mµ (to do list). ⁿú ¿@MµC
d (query). ¡ε@p¼]ΦkC
nD (request). Tivoli Identity Manager tñA@n
DπΩT@C
nD (requestor). eXnDHC
nDΩT (request for informationARFI). bz¡OAVⁿwPnDΣLΩT@Aobu
@yO@ nBJC
Q
HΩT (personal information). HΩTCoΩTiH]tmBWBϕaaBqXBqll
≤BXM ÑÑC
h (policy). b Tivoli ñA@M≤ⁿzΩW
hC±ΦíAhiHMKXAMQ
nsΩC
hIµ (policy enforcement). Tivoli Identity Manager
tⁿúⁿH1hºbΦíC
© Copyright IBM Corp. 2003 33
Q@
P (participant). b¡zñAvw∩zLu@y2eXnDXHCPiQ°H
ñΓAQq JavaScript Script [HOC
µ (business unit). ñ@lqΩΘC
±H (business partner person). ±ñ@HC
± (business partner organization). iH
[Jñ@lqΩΘCq ±O
O]HBΣLúOu²iαnq
ΩsvHsC
KX (password). bqúM⌠⌠wñA ΘJHtOSwrΩAªiH²stA
HxsbΣñΩC
KXh (password policy). wqKX Xº]wWhAp°AHe\Múe\r(
¼C
KX¡ (password expiration period). bjó≤∩KXºeAªα≈h[C
bß (account). wqnJΩTMsεΩT
C
bß°i (account report). o≈°iCXHΣ÷bßAHbßOµhC
v (authorization). bqúwñAqútPqútqTv¡C∩½
≤BΩτπ¡svC
jíwtúOΓBJC@Ñq
OOATwNOLnHCGÑqO
vAe\o¡sUΩC
(organization). b¡zñAWMΩDΘC÷MºíiH@ΩA²ºí
πXhoϕCCq NOⁿqC
µ (organizational unit). ñMΩDΘAtdNhiHzsCu
αⁿú@µCΩ]uαⁿú@µ
]úDª QwqqC
≡ (organization tree). ÑhícAiúΦí BsMxsΩTC
Q°i (rejected report). o≈°iOΘB nD@Hw∩ nD@ACFQn
DC
QnD (requestee). nDOw∩oHeXC
QG
ú¡ε (escalation limit). biµú6@ºeAP ∩nDXq]ΘBBϕC
úP (escalation participant). b¡zñAvbⁿwú6íA∩≤PSnDX
HCú6PiQ°HñΓAQ
q JavaScript Script [HOC
ú HR (HR feed). Tivoli Identity Manager tqH
OΩΩwJΩC
uú DSML ¡vC
QT
Ω (resource). Tivoli nΘzwΘBnΘ
ΩΩΘCt\uⁿzΩvC
Q
ΩΘ (entity). 1) ⁿH½≤AΩTNOw∩oH½
≤xsC
2) Tivoli Identity Manager tUCΣñ@
OG
v Person
v BPPerson
v Organization
v BPOrganization
(supervisor). b Tivoli Identity Manager tñA
QⁿwµtdHHC
(credential). e\sbß ID M
KXΩTC
Γz (domain administrator). oziHwqMzbΣzΓΩΘBhBABu@
ywqBñΓHA²u¡≤LvzΓ
d≥C
Q¡
fO² (audit trail). qútbYqñµ÷O
²C
(suspend). °bßA²bßLknJΩ@C
34 Tivoli Identity Manager: @δΓU
Ld (challenge response). oO@OΦkAªnDbnJ⌠⌠AúMΩTτ¡A
∩úXC
(reconciliation). ±ñíΩxswMⁿzNztΩTAHOΓºítºC
°i (reconciliation report). o≈°iCFqW@⌡µºßAΣtbßC
Q
(owner). b Tivoli Identity Manager tñA
bßAHC
QC
mñnD (pending request). wgeXtA²%¿nDC
(restore). ½sbßC
QE
÷Σr (keyword). bjM@ñAOh2
C
GQ@
GQG
O (authentication). OH¡ (q O
WMKX[HO) CbwtñAOPv
OIMúPAvOⁿH¡AúHt½
≤svCOuOTwoHNOLn
¡B²%ú÷≤HsvΩTHC
A
I
S
T
Wⁿ 35
36 Tivoli Identity Manager: @δΓU
N
σ≤Yw∩ IBM bⁿΩúºúPAoFbΣLΩañAIBM úúo
ú≤ñúUúBA\αCóϕa IBM NϕAHo
ϕaeúúMAº÷ΩTCo≈σ≤bú IBM úBíAA
úϕtuα IBM úBíACun%I, IBM z]úvA
⌠≤\αϕúBíAúiHN IBM úBíACúLA⌠≤
D IBM úBíAA µtd@⌠Mτd⌠C
o≈σ≤íDDeAIBM iαΣMQMQ-Cúo≈σ≤úNϕ
úo MQvCziHúXvdAτHG
IBM Director of Licensing
IBM Corporation
North Castle Drive
Armonk, NY 10504-1785
U.S.A.
pGO÷( (DBCS) ΩTvdAóbΩ IBM z]úíA
úXvdAτHG
IBM World Trade Asia Corporation
Licensing
2-31 Roppongi 3-chome, Minato-ku
Tokyo 106-0032, Japan
UCq¿úA≤Ω°Pϕak ΦΣLΩaG
International Business Machines Corporation) u“p”úXAúú⌠≤
tºOAΣñ]ABú¡≤úH1WwBiSwºA⌠
tOC abSwµ÷WAú\útOA] Aonú
@wAXzC
oΩTñiαNWLΩWC] AIBM wqFNqß
eJsñCIBM H∩iM/≤XúúM/íAút
µqC
o≈ΩTñú⌠≤D IBM ⌠uAIBM úo ⌠úOCo ⌠
úΩúO IBM úΩeApGno ⌠ΩAz
µßIC
IBM oHUAϕΦíG zú⌠≤ΩTAL∩ztdC
pGí≥vHF (i) bO íMΣLí]]Aíºíµ½
ΩTAH (ii) ¼µ½ΩTA]n÷ΩTAóG
IBM Corporation
2ZA4/101
© Copyright IBM Corp. 2003 37
11400 Burnet Road
Austin, TX 78758
U.S.A.
o ΩTiAϕ° oAbY ípU IOΦoC
IBM ≥≤Φº IBM ßXBIBM ΩívXA⌠≤PÑX° A
úΩTúvíPΣAvΩC
Bt⌠≤αΩAObⁿε⌠UoXAPbΣL@⌠UoX
GAiαjtºCqΩObotW AúOPΣLqt
WqΩ@C AqΩiαOzL[Hw⌠AΩGúú
oPCσTΣSw⌠AΩC
úºD IBM úΩTAúAΣoGnΣLDC
IBM %Lo úA]LkTo D IBM ú⌡µαBe⌠≤∩
úΣLDiOLC÷D IBM úαDóúC
UCⁿJO International Business Machines Corporation bⁿΩ/ΣLΩa
UG
AIX
DB2
IBM
IBM x
OS/390
SecureWay
Tivoli
Tivoli x
Universal Database
WebSphere
z/OS
zSeries
Lotus® O Lotus Development Corporation / IBM Corporation UC
Domino™ O International Business Machines Corporation M Lotus Development Corporation
bⁿΩ/ΣLΩaC
Microsoft®BWindowsBWindows NT M Windows xO Microsoft Corporation bⁿ
Ω/ΣLΩaC
Java™ MH Java ≥ªMxAO Sun Microsystems, Inc. bⁿΩMΣL
ΩaUC
UNIX O The Open Group bⁿΩΣLΩaUC
38 Tivoli Identity Manager: @δΓU
Java MH Java ≥ªMxAO Sun Microsystems, Inc. bⁿ
ΩMΣLΩaUC
ΣLqBúAWAiαOTAxC
N 39
40 Tivoli Identity Manager: @δΓU
2HñσrAσrASϕº
CC
e@f@δ\α
Θ 10
uWí 10
²
u@C 9
Φk 9
D\αϕ²C 9
eTfu@C 9
w¿nD
í 18
° 18
efσ≤
suW vi
e¡fD\αϕ²C 9
Θ 10
ef@KX 18
eCf@°i
ú 23
í 21, 23
eKf
°i
ú 26
í 22, 26
#
²
u@C 9
# (≥)
² (≥)
D\αϕ²C 9
eúv¡
sW 19
í 19
≤ 20
°i
í 22
A
°i
ú 25
í 21, 24
eEfMµ
17
í 16
°Ω 17
w¿nD
í 18
\αd≥ 11
eúv¡
∩eú 20
sWeú 19
í 19
≤eú 20
Mµ
í 16
°nDΩ 17
HΩT
í 18
KX
∩uLd-v¬ 20
z 11
bßz
[Jsbß 13
°bß 14
∩bß 14
í 12
bß 14
bß 15
mñnD
í 17
≤KX 15
© Copyright IBM Corp. 2003 41
eQfHΩT 18
uqΩTv
us 18
yX 18
18
lHa 18
18
18
uHΩTv
W 18
@KX 18
Wr 18
Wr@r! 18
ϕaa 18
m≤ 18
ñΓ 18
∩ 19
uqTΩTv
µqX 19
ϕaq 19
OW 19
Is 19
qll≤ 19
qX 19
sW 19
hIµ
XX
úX 13
13
X 13
i 13
u
qΩT 18
yX 18
18
lHa 18
X 18
18
18
HΩT
W 18
@KX 18
Wr 18
Wr@r! 18
ϕaa 18
m≤ 18
ñΓ 18
pΩT
µqX 19
ϕaqX 19
OW 19
IsX 19
qll≤ 19
qX 19
y
suW vi
eQ@fKX
O
tmuLd-v¬ 20
nJ 6
z 11
Ld/
6
¬ 6, 20
bß
° 14
∩ 14
°i
í 22
sW 13
z 12
14
15
KX 5
bß°i
ú 31
í 30
Θr vii
Θr vi
Q°i
ú 28
í 27
eQGf°i
i¼ 21
@
ú 23
í 21, 23
ú 26
í 22, 26
ú 28
í 22, 27
A
ú 25
í 21, 24
bß
ú 31
í 22, 30
ú 30
í 22, 29
42 Tivoli Identity Manager: @δΓU
°i (≥)
ú 29
í 22, 29
¼
@ 21, 23
22, 26
22, 27
A 21, 24
bß 22, 30
22, 29
22, 29
Ad-Hoc 22, 32
Ad-Hoc
ú 32
í 22, 32
nJ
OKX 6
í 5
ÑerΘ vi
eQfz
KX 11
bß 12
eQ¡f
°i
í 22
°i
ú 30
í 29
uWí 10
°i
ú 29
í 22, 29
eQf²
u@C 9
Φk 9
D\αϕ²C 9
eQCfmñnD
í 17
eGQ¡f[ v
AAd-Hoc
°i
í 22
Ad-Hoc °i
ú 32
í 32
2 43
44 Tivoli Identity Manager: @δΓU
íX: 5724-C34
Denmark by IBM Danmark A/S
SC40-1844-01