Identity Management Tutorials

The installation package includes tutorials, which demonstrate the tools and adapters. Each tutorial takes about half an hour when all the exercises are done. Alternatively just do the exercise that interests you.

See AMXTutorialSetup for a subset of the full install and configuration suitable for these tutorials. For the complete installation see AMX Installation Document

AMX Tutorial CSV1 simple attribute transforms

• Concatenating and changing case of attribute values
• Using the concatIfNull attribute modifier to update blank attribute values
• Using lookup tables
• Appending value that may be null
• Creating distinguishedNames with concat
• Creating account names with truncate
• Using an EndDate to mark an identity as inactive
• Filtering records
• Merging attributes such as telephone numbers
• Reformatting attribute values such as telephone numbers
• Setting the IsaManager attribute
• Setting the manager’s email of an identity

AMX Tutorial CSV2

• Using Excel as an identity source
• Using a Text file in SAP format as an identity source
• Using a CSV file as a managed resource
• Auditing
• Debugging

amx-tutorial-security

• Encrypting Password files
• Locking passwords to property files
• Tampering with transaction files

AMX Tutorial HRMS1 OracleHRMS as an Identity Source

This tutorial uses an on-site HRMS system as an example of HR Driven identity management.

• Extracting Identities from the Oracle HR_demo
• Selecting end_date from job_history
• Selecting all columns from job_history
• Using the end_date to determine employment status active / terminated
• Using identitySync

AMX Tutorial HRMS2 Sage 50 HR as an Identity Source

• Exporting Employees from Sage as a CSV file and use IdentityReport to read it
• Exporting a Sage Report as a CSV file and use IdentityReport to read it
• Creating a new administrative account in the Sage MySQL database
• Extracting employees from the Sage MySQL database
• Using the Employment Ended On date to determine employment status

amx-tutorial-hrms3 OrangeHRM as an Identity Source

• Extracting the Identities from the OrangeHRM MySQL database
• Using nested select to extract the manager’s name
• Creating a file of Active Directory user accounts
• Running accountMatch to check the match between identities and accounts
• Configuring AMX properties to analyse the changes that would be made to the Active Directory

amx-tutorial-hrms4 Cloud Based HRMS Systems as Identity Sources

This tutorial as an example of cloud based HR Driven identity management. It uses PeopleHR and ZohoPeople to show AMX facilities for extracting identites from cloud based HRMS systems using REST web APIs.

• Extracting the identities using REST APIs
• Transforming leaving dates to active status
• Transforming other dates

AMX Tutorial AD1 simple updates of the Active Directory

• Using identityReport to generate a file of identities from your Active Directory. In a production situation this identity source would be obtained from an HR system
• Using identitySync in preview mode with the file of identities to synchronise the Active Directory. With no changes to the identities, no changes will be reported for the Active Directory
• Making some changes to the identities, and synchronising with the Active Directory in preview mode. Reviewing the outputs of identitySync
• Re-running identitySync in the update mode to have identitySync make an update to the Active Directory
• Re-running identity Sync in the undo mode to restore the Active Directory to its original configuration
• Using the DSMOD do and undo files created by identitySync, to manually update the Active Directory
• Updating other attributes, CNs, distinguishedNames and Managers

AMX-tutorial-ad2 Evaluating Identity attributes

• Creating account names with predictable formats
• Disabling accounts and deleting accounts by moving them to a Re-cycle bin
• Creating Metaverse values using immediate evaluation
• Creating Metaverse values by combining them with the concatenate function
• Updating First Names with Preferred Names when present, using the secondary attribute flag

AMX Tutorial AD3

• Configuring the account create email template
• Configuring recipients for an account create
• Configuring email.

AMX Tutorial AD4

• Using an LDIF File
• Using the Active Directory as an LDAP Resource
• Using multiple Active Directory instances

AMX Tutorial AD5 Active Directory Dynamic Groups

• Defining groups in an Identity Source – Identity based Roles
• Defining groups in an Identity Source using a lookup table

AMX Tutorial AD6 Active Directory RBAC and Role Management

• Using Role Templates or models to implement RBAC
• Role change hysteresis, changing group membership using make before break
• Role management modes, Strict, Loose and None
• Creating Manager Roles

AMX Tutorial AD7 Active Directory thumbnailPhoto

• Extracting image files from a directory
• Joining image file to a User Account in the Active Directory
• Loading images into the Active Directory
• Updating images in the Active Directory

AMX Tutorial UX1 Unix as a managed resource

• Creating an identity source for Unix
• Configuring Unix properties and schema
• Using the comment or GECOS field
• Running identitySync and updating Unix accounts

AMX Tutorial Gluu Identity and Access Management Server

This tutorial shows how the Gluu identities can be managed from an authoritative source such as HRMS systems rather than being managed independently within Gluu.

• Connecting to the Gluu OpenDj Ldap server
• Using IdentityReport to Extract accounts from the Ldap server
• Synchronising OpenDj with the Identity Report CSV File
• Synchronising OpenDj with the Active Directory

AMX Tutorial Match1 accountMatch

• Running accountMatch on the demo data
• Running accountMatch on identity and account data extracted from your environment
• AMX Tutorial Share1 HomeShare
• Running identityReport on a FileServer
• Running identitySync on a FileServer
• Running identitySync in production

AMX Tutorial Role Mining, creating roles from Identity attributes

• Running roleAnalyze to create roles using existing data
• Preparing a survey for roleAnalyze of the Active Directory
• Configuring properties for roleAnalyze to review Active Directory data
• Running and reviewing the results of roleAnalyze
• Checking the create role template batch file output by roleAnalyze

AMX Tutorial Separation Of Duties SOD analysis

• Understanding the SOD rule matrix
• Running SODanalyze and reviewing the results
• Updating the SOD risk value
• Running SODanalyze and reviewing the results
• Remediating by removing a responsibility

Next Page