Manage Catalog

As a System Administrator, Manage Catalog is where you will find yourself most of the time within IDHub Admin Console.

On click of 'Manage Catalog' from Dashboard, you will land up here in the Manage Catalog page.

Below are the sections you can go into from the Manage Catalog page:

Left Panel

This global navigation bar on the left helps you navigate to different modules within IDHub.

Add Application

Add Application allows onboard of a single application or multiple applications using a wizard format. Choose one of the following from the drop-down options on click of Add Application:

Add Application

This is to request a single application & on-board it using a wizard.

Bulk Application Upload

You can request multiple or bulk application on-boarding using .csv file. Steps to perform this are:

1. Download a sample.csv file template and review it's file header for required application attributes. 
2. Modify sample file to provide application specific data. Each row within the .csv provides details for a single application. Total number of rows indicate total applications being on-boarded in batch.
3. Save and upload file for processing.
4. Validate and request approval of multiple applications with a single file submit !

Create Role

Create Role allows you to define a Role withing IDHub that defines access to all the applications and entitlements that role will provide to perform a job. As a system administrator you will be responsible for managing the -

• Development of access policy to that Role that determines who gets access to the Role. 
• Association of applications and entitlements that are required as part of that Role.
• Certification of role memberships on a periodic basis to maintain adherence to organizational and regulatory standards

Search Bar

The Search bar comprises of a search box to enter search criteria and a filter tab that helps you filter the results. You can use the tab to view "All" the results or only "Applications" or only "Roles".

Search Results

Provide a list view of results generated of a search.

Application Card with Actions

Each  application in the result set is displayed in a separate tile and has the following items -

• Application Logo
• Application Name
• Health Status
  • If Green - that means the application is completely synced and good to request
  • If Neutral - There might be a break in application information either due to form mismatch or workflow errors, no one will be able to request the application unless the error is fixed. To get the exact error, hover over the Health indicator alongside Application name
  • If Red - The connection may be broken and you would need to fix the connected application to resume access requests
• Tags (If any)
• Description (if any)

Admins can perform below functions:

• View: An Admin can enter the view application section by clicking on the card
• Edit: By pressing on the Edit icon, Admin can start editing the application. On Click, system opens the Application Wizard in Edit Mode and allows the system administrators to make changes to fields. On submission after edit, the Application again goes through an approval request workflow to the Access Manager group for approved changes to be reflected in the Catalog.
• Other functions:
  • Export PDF: Exports the Application data in PDF format (This function is not available in current versions of IDHub)
  • Export JSON: Exports the Application data in JSON format.
  • Disable:  Disables the Application. This causes the application to be removed from the search catalog page and is no longer requestable. All identities with access to the application will have their access disabled.
  • Retire Application: Decommissions the application and revokes the application for all identities.
  • Target System Synchronizations: Synchronization is the process of updating of changes to user identity and entitlements data from IDHub to Target System using  user identity synchronization. This synchronization detects changes to user attributes and automatically copies over the updates from Target systems  to IDHub. (This feature will only be present for Connected applications) - (This function is not available in current versions of IDHub)
  • Reconciliation: This is a process of importing data from a disconnected system on a periodic basis as determined by you. The goal is to verify that  actual access of the user aligns with approved access. After an Application is on-boarded , reconciliation is enabled . You can upload flat files using sample templates for target systems under your management. This allows you to fetch user account profiles and their entitlements (permissions) from target systems and publish them in IDHub.

Role Card with Actions

Each  role in the result set is displayed in a separate tile and has the following items -

• Role Logo
• Role Name
• Tags (If any)
• Description (if any)

Admins can perform below functions:

• View: An Admin can enter the view role section by clicking on the card
• Edit: By pressing on the Edit icon, Admin can start editing the role. On Click, system opens the Role Wizard in Edit Mode and allows the system administrators to make changes to fields. On submission after edit, the Role again goes through an approval request workflow to the Access Manager group for approved changes to be reflected in the Catalog.
• Other functions:
  • Export PDF: Exports the Role data in PDF format
  • Export JSON: Exports the Role data in JSON format.
  • Disable:  Disables the Role. This causes the role to be removed from the search catalog and is no longer requestable. All identities with access to the application will have their access disabled.
  • Retire Role: Decommissions the role and revokes the role and applications/ entitlements that got provided due to role assignment for all identities.

Let us understand how to Onboard an Application via Application Wizard now in the next section!