Main components
Main components in the IBM Security Identity Manager solution include the IBM® Security Identity Manager Server and required and optional middleware components, including adapters that provide an interface to managed resources.
In a cluster configuration, main components include:
For more information about configuration alternatives, see the IBM Security Identity Manager Installation Guide.
Components include:
- Database server products
- IBM Security Identity Manager stores transactional and historical
data in a database server, a relational database that maintains the
current and historical states of data.
Computers that communicate with the database require a Java™ Database Connectivity driver (JDBC driver). For example, a JDBC driver enables a IBM Security Identity Manager Server to communicate with the data source. IBM Security Identity Manager supports a JDBC type 4 driver to connect a Java-based application to a database.
The supported database product is IBM DB2® database. The information about type 4 JDBC drivers for each database product are as follows:- IBM DB2 Database
- DB2 supports a Type 4 JDBC driver. The DB2 type 4 JDBC driver is bundled with the IBM Security Identity Manager installation program.
For more information about supported database server products, see Hardware and software requirements.
- Directory server products
- IBM Security Identity Manager stores the
current state of the managed identities in an LDAP directory, including user account and
organizational data.
IBM Security Identity Manager supports the IBM Security Directory Server.
- IBM Security Directory Integrator
- IBM Security Directory Integrator synchronizes identity data in different directories, databases, and applications. IBM Security Directory Integrator synchronizes and manages information exchanges between applications or directory sources.
- HTTP server and WebSphere® Web Server plug-in
- An HTTP server provides administration of IBM Security Identity Manager through a client interface in a web browser. IBM Security Identity Manager requires the installation of a WebSphere Web Server plug-in with the HTTP server. The WebSphere Application Server installation program can separately install both the IBM HTTP Server and WebSphere Web Server plug-in.
- IBM Security Identity Manager adapters
- An adapter is a program that provides an interface between a managed
resource and the Identity Manager Server.
Adapters function as trusted virtual administrators on the target
platform for account management. For example, adapters do such tasks
as creating accounts, suspending accounts, and modifying account attributes.A Identity Manager adapter can be either agent-based or agentless:
- Agent-based adapter
- You install adapter code directly onto the managed resource with which it is designed to communicate.
- Agentless adapter
- Deploys its adapter code onto the Identity Manager Server and the system that hosts Security Directory Integrator. The adapter code is separate from the managed resource with which it is designed to communicate.
Note: For agentless adapters, the SSH process or daemon must be active on the managed resource.