IBM Security Identity Governance and Intelligence, Version 5.2.4

Importing target profiles

As an administrator, you can import a profile definition file, which creates a profile in Identity Governance and Intelligence. Use this option for importing Identity Brokerage profiles only.

Before you begin

The file to be imported must be a Java™ archive (JAR) file.

Important: If you want to import Identity Brokerage profiles or language packs, you must enable Identity Brokerage Providers in the IBM® Security Identity Governance and Intelligence virtual appliance. For more information, see Enabling Identity Brokerage Providers in the virtual appliance.

About this task

A target profile defines the type of managed resource that Identity Governance and Intelligence can manage. Target profiles are also called Identity Brokerage adapter profiles. The profile definition files are provided with the various Identity Brokerage Adapters. The target profile must be imported into Identity Governance and Intelligence because it defines the types of resources that the Identity Governance and Intelligence server can manage.

Note: In previous versions of the product, a target profile was referred to as a target type or an adapter profile.

The Identity Brokerage target definition profile is a Java archive (JAR) file that contains the following information:

Target information, including definitions of the account provisioning operations, such as add, delete, suspend, or restore.
Target provider information, which defines how Identity Governance and Intelligence communicates with the managed resource.
Schema information, including the LDAP classes and attributes.
Account and target forms and the label for the attributes for creating targets and requesting accounts on those targets. The forms and labels are displayed in the user interface of the Enterprise Connectors module.

The Identity Brokerage profile definition file is used to create a target profile on the Identity Governance and Intelligence server and to establish communication with the Identity Brokerage adapter. If the Identity Brokerage target definition file is not imported, you cannot manage the profiles.

An upload error might occur when no file is selected, or when the file is empty, or due to any upload operation error, such as a timeout or connection error.

This task can be completed from the Enterprise Connectors module in the Administration Console.

Procedure

To import a Identity Brokerage target profile, complete these steps:

Log in to the Identity Governance and Intelligence Administration Console. The Administration Console is displayed.
From the Administration Console, select Enterprise Connectors. The Enterprise Connectors module is displayed.
Select Manage > Profiles. A list of profiles is displayed on the Profiles tab.
Optional: Click to toggle the filter on to refine your search results, or click to toggle the filter off. When the filter is visible, specify search criteria for your requests, and then click Search.
Click Actions > Import. The Import page is displayed.
On the Import page, complete these steps:
1. Select Profile.
2. Click Browse to locate the JAR file that you want to import. For example, if you are installing the IBM Security Identity Governance and Intelligence adapter for a Windows server that runs Active Directory, locate and import the ADProfileJAR file.
3. Click Upload file. A message indicates that you successfully imported a profile.
Click Close. The new profile is displayed in the list of profiles.

Results

The upload is synchronous but has a timeout. The progress bar on the Import page accurately indicates the upload status. However, when a timeout is reached, the following message occurs: "The import is still in progress and will complete shortly. Close this window to proceed." If you see that message, allow a few minutes for the upload to complete and for the profile to be available.

What to do next

After the profile is successfully imported, you need to import the attribute mapping definition file. For more information, see Importing attribute mapping definition files.

Then, create and enable a connector that uses the target profile. See Connectors administration.

If you cannot create a connector with the target profile or open an account on an existing connector, the target profile was not installed correctly during the import. You must import the target profile again.