This process defines the process of onboarding new applications into IDM and target systems and managing roles, entitlements, and associated properties.


Process Flow

Process Name

Application On-Boarding Process

Brief DescriptionThe application Onboarding process can be defined for both Connected and Disconnected systems. This process enables the user to add an application in IDM and respective target systems.

Actors

  • IDM

  • Target Systems

  • Applications

Trigger Events

  • Application onboarding is authorized for users with Application Instance Administrator or System Administrator admin roles.

Preconditions

  • New Application Wizard and Batch file upload process is working in Management Console

Post-Conditions

Success

  • An application is on-boarded in both IDM and Target Systems

Fail

  • Application is not onboarded in IDM and Target systems
Basic Flow

Onboarding process using new application wizard

  • User onboard applications using new application wizard
  • Enters the application details and select a new target system
  • Enter target system details and target system account attributes
  • Add entitlements for the target system using the "Add New Entitlement" tab
  • Add all the entitlements as required
  • Click "Save and Continue" for saving the data being entered
  • Add role on the click of "Add New Role" tab
  • Select the entitlements of the selected target system
  • Click "Save and Continue" for saving the data being entered
  • The role is created for the application with the assigned entitlements
  • Submits a request to IAMS for approval
  • After entering application details, when the user doesn't select a new target system
  • Add role on the click of "Add New Role" tab
  • Select the entitlements of the selected target system
  • Click "Save and Continue" for saving the data being entered
  • The role is created for the application with the assigned entitlements
  • Submits a request to IAMS for approval

Onboarding process using new application batch

  • The user performs bulk application onboarding using the New Application batch file upload
  • Download sample file using "Click to Download Sample flat-file"
  • Download sample files separately for application, target, systems, forms, entitlements, and role
  • Update the file with relevant application, target, systems, forms, entitlements, and role that required to upload
  • Upload the updated file using the browse button
  • Once the file is uploaded, click on "Validate" for validating the file
  • Once the file is processed after validation, status changes to "Processed"


Diagram

The diagram below illustrates the application onboarding process using the new application wizard


The diagram below illustrates the application onboarding process using the new application batch

#Requirements Description
1The application can be on-boarded (configured) via IDM Self Service.
2

Application configuration can be exported as application templates and used to configure applications.

3Application onboarding is authorized for users with Application Instance Administrator or System Administrator admin roles.
4The application can be created as a Target Application or Authoritative Application type.
5The application can be created from a Connector Package or using Application Templates.
6The application can be created as a disconnected application.
7Application Instance can be created that shares the configuration of the base application but include different connectivity options.
8The application can be cloned with all the configuration of the base application.
9The application can apply, validate, and transform provisioning attributes before passing the attributes to the target system.
10The application can be searched based on the application name, display name, connector name, and base application.
11The application can be edited.
12The application template can be modified.
13Applications can be created in bulk.
14Application instance can be created in bulk
15The application cannot be deleted.