Integrate IG with IG

[Nihii]

Hi,

Checking to see can we integrate IG within IG for Access Request, Review and fulfillment.

Thanks

Nihii

[stevewdj]

Greetings,
What exactly do you mean by "can we integrate IG within IG for Access Request, Review and fulfillment"?

Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus

[Jimbot]

I realize I'm waking up an old thread, but I've got the same requirement (at least I think so).

I want to ensure I have regulatory compliance with access to IG, as the compliance app.  That is, I want to perform reviews on IG access.   

If I use AD or IDV groups to manage role access, then I know I can collect those and review them. But, if I wanted to view the role assignments for each of the authorization roles, what's the best way?  JDBC collector to my ops DB?  REST collector against the API?  Some other way?

--Jim

[Nihii]

Hi,

I have two different integrations for this setup

1. eDirectory Groups and map those to authorizations

2. JDBC Collector to our own DB.

I felt if I use eDirectory groups fulfillment it will be a straight forward ldap automated fulfillment.

Thanks

Nihii

[Jimbot]

Do you have a SQL Select statement that you used to collect the authorizations?   Could you share that, or at least point me at the right tables?

I like the LDAP fulfiller idea.

--Jim

[stevewdj]

Greetings,
    There is a report that covers this, "Authorization Assignments", it will show you who is currently assigned to the Administrator Assignments (like Global Admin, Security Admin, Data Admin, ..etc) within Identity Governance. There has been discussion about having a default Review that would cover these Administrator Assignments (and maybe covering the delegate admin assignments).  I would strongly encourage utilizing the Report (which you can schedule and email out as required) as compared to directly going against the Identity Governance data tables.

Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus

[stevewdj]

Greetings,
        The "Authorization Assignments" report has been available since Identity Governance 3.5.0  (17-December-2018).

Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus

[Jimbot]

That report should hit the spot, at least for now.  Thanks!