The sections below contains information about the key driver features.
The Delimited Text driver runs on the Identity Manager server or uses the Remote Loader to run on another server.
The Delimited Text driver supports custom and administrator-defined entitlements. The driver content includes a new entitlement package that allows Identity Manager to consume CSV files containing target system permission information, dynamically create an entitlement and dynamic resource for each permission type, and load the permission data as entitlement values into Identity Manager Role-Based Provisioning Module. The driver can then automatically provision or deprovision these resources to Identity Manager identities based on attribute values consumed during standard Publication channel processing.
The following packages contain the content necessary for Permission Collection and Reconciliation service:
NOVLDTXTBASE_2.2.0 (Base Package)
NOVLDTXTENT_2.0.0 (Entitlements Package)
If you want the driver to support custom and administrator-defined entitlements, ensure that these packages are installed on the driver. You can turn Permission Collection and Reconciliation service on or off using GCVs provided with this service.
Before continuing, ensure that you go through the prerequisites needed for enabling this service. For general prerequisites, see Synchronizing Permission Changes from the Connected Systems
in the NetIQ Designer for Identity Manager Administration Guide. In addition to the general prerequisites, ensure that the Delimited Text driver version is 4.0.0.1 at a minimum.
Also, you need to set up administrative user accounts and configure a password policy for them. For more information, see Setting Up Administrative User Accounts
and Setting Up Administrative Passwords
in the NetIQ Identity Manager Driver Administration Guide.
To use the Permission Collection and Reconciliation service included in the Delimited Text driver, you can either create a new driver with the latest packages or upgrade packages on an existing driver. For more information about creating a driver, see Section 3.2, Creating the Driver Object in Designer or Section 3.4, Adding Packages to an Existing Driver.
The Delimited Text driver can consume the entitlement information from the CSV file extracted from a target system. The CSV file must contain values for the target system permission information in a correct format so that the driver reads them correctly from the file. A separate CSV file must be maintained for every custom entitlement. For example, a CSV file that holds ParkingPass entitlement details represents this information in the following format:
North, North Lot, North Parking Lot
where North is the entitlement value, North Lot is the display name in the User Application for the entitlement value North, and North Parking Lot is the description for the entitlement value. This description is displayed in the User Application.
The CSV file must be located on the same server as the driver. This file contains the values for application entitlements.
The Delimited Text driver has policies to handle password synchronization. However, no automatic password synchronization exists for the Delimited Text driver. You must decide which attribute you want to hold the password and then synchronize that attribute. Any password synchronization for the driver is just an attribute synchronization.