154 lines
11 KiB
HTML
154 lines
11 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="task" />
|
||
|
|
<meta name="DC.Title" content="Add lookup information to a target user identity" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzalvadminassociations.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2002, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2002, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzalvaddlookupinfo" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Add lookup information to a target user identity</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzalvaddlookupinfo"><a name="rzalvaddlookupinfo"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Add lookup information to a target user identity</h1>
|
||
|
|
<div><div class="section"><p><a href="rzalvlookupinfodef.htm#lookup_info_def">Lookup information</a> is
|
||
|
|
optional unique identifying data for the target user identity defined in an
|
||
|
|
association. This association can be either an identifier target association
|
||
|
|
or a policy association. Lookup information is necessary only when a mapping
|
||
|
|
lookup operation can return more than one target user identity. This situation
|
||
|
|
can create problems for Enterprise Identity Mapping (EIM) enabled applications,
|
||
|
|
including i5/OS™ applications
|
||
|
|
and products, that are not designed to handle these ambiguous results. </p>
|
||
|
|
<p>When
|
||
|
|
necessary, you can add unique lookup information for each target user identity
|
||
|
|
to provide more detailed identifying information to further describe each
|
||
|
|
target user identity. If you define lookup information for a target user identity,
|
||
|
|
this lookup information must be provided to the mapping lookup operation to
|
||
|
|
ensure that the operation can return a unique target user identity. Otherwise,
|
||
|
|
applications that rely on EIM may not be able to determine the exact target
|
||
|
|
identity to use. </p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> If you do not want EIM lookup operations to be
|
||
|
|
able to return more than one target user identity, then you should correct
|
||
|
|
your EIM associations configuration instead of using looking information to
|
||
|
|
resolve the situation. See <a href="rzalv_trouble_mappings.htm#rzalv_trouble_mappings">Troubleshoot EIM mapping problems</a> for
|
||
|
|
more detailed information.</div>
|
||
|
|
<p>How you add lookup information to further
|
||
|
|
define a target user identity varies based on whether the target user identity
|
||
|
|
is defined in an identifier association or a target association. Regardless
|
||
|
|
of the method that you use to add the lookup information, the information
|
||
|
|
that you specify is tied to the target user identity, not the identifier associations
|
||
|
|
or policy associations in which that user identity is found. </p>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzalvadminassociations.htm" title="Use this information to learn about the different types of associations you can manage with Enterprise Identity Mapping (EIM).">Manage associations</a></div>
|
||
|
|
</div>
|
||
|
|
</div><div class="nested1" xml:lang="en-us" id="addlookupinformationtoatargetuseridentityinanidentifierassociation"><a name="addlookupinformationtoatargetuseridentityinanidentifierassociation"><!-- --></a><h2 class="topictitle2">Add lookup information to a target user identity in an identifier association</h2>
|
||
|
|
<div><div class="section"><p>To add lookup information to the target user identity in an identifier
|
||
|
|
association, you must be connected to the EIM domain in which you want to
|
||
|
|
work and you must have <a href="rzalveservereimauths.htm#rzalveservereimauths">EIM access control</a> at
|
||
|
|
one of these levels: </p>
|
||
|
|
<ul><li>Registry administrator.</li>
|
||
|
|
<li>Administrator for selected registries (for the registry definition that
|
||
|
|
refers to the user registry that contains the target user identity).</li>
|
||
|
|
<li>EIM administrator.</li>
|
||
|
|
</ul>
|
||
|
|
<p>To add lookup information to the target user identity in an identifier
|
||
|
|
association, complete these steps: </p>
|
||
|
|
</div>
|
||
|
|
<ol><li class="stepexpand"><span>Expand <span class="uicontrol">Network > Enterprise Identity Mapping > Domain
|
||
|
|
Management</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select the EIM domain in which you want to work.</span> <ul><li>If the EIM domain you want to work with is not listed under <span class="uicontrol">Domain
|
||
|
|
Management</span>, see <a href="rzalvadmindomainadd.htm#rzalvadmindomainadd">Add an EIM domain to the Domain Management folder</a>.</li>
|
||
|
|
<li>If you are not currently connected to the EIM domain in which you want
|
||
|
|
to work, see <a href="rzalvadmindomaincon.htm#rzalvadmindomaincon"> Connect
|
||
|
|
to the EIM domain controller</a>. </li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span>Expand the EIM domain to which you are connected.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Identifiers</span> to display the list of
|
||
|
|
EIM identifiers for the domain.</span> <div class="note"><span class="notetitle">Note:</span> Sometimes when you attempt
|
||
|
|
to expand the <span class="uicontrol">Identifiers</span> folder, it may take a long
|
||
|
|
time before the list of identifiers displays. To improve performance when
|
||
|
|
you have a large number of EIM identifiers in the domain, you can <a href="rzalvadmincustomview.htm#Customize_view">customize</a> the
|
||
|
|
<span class="uicontrol">Identifiers</span> folder view by restricting the search
|
||
|
|
value used for displaying identifiers. Right-click <span class="uicontrol">Identifiers</span>,
|
||
|
|
select <span class="uicontrol">Customize this view... > Include</span>, and specify
|
||
|
|
the display criteria to use for generating the list of EIM identifiers to
|
||
|
|
include in the view.</div>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span>Right-click an EIM identifier and select <span class="uicontrol">Properties...</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select the <span class="uicontrol">Associations</span> page, select the
|
||
|
|
target association to which you want to add lookup information, and click <span class="uicontrol">Details...</span>.
|
||
|
|
Click <span class="uicontrol">Help</span>, if necessary, to determine what information
|
||
|
|
to specify for each field.</span></li>
|
||
|
|
<li class="stepexpand"><span>In the <span class="uicontrol">Association - Details</span> dialog, specify
|
||
|
|
the <span class="uicontrol">Lookup information</span> that you want to use to further
|
||
|
|
identify the target user identity in this association and click <span class="uicontrol">Add</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Repeat this step for each lookup information entry that you want
|
||
|
|
to add to the association.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to save your changes and to return
|
||
|
|
to the <span class="uicontrol">Association - Details</span> dialog.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to exit.</span></li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="nested1" xml:lang="en-us" id="addlookupinformationtoatargetuseridentityinapolicyassociation"><a name="addlookupinformationtoatargetuseridentityinapolicyassociation"><!-- --></a><h2 class="topictitle2">Add lookup information to a target user identity in a policy association</h2>
|
||
|
|
<div><div class="section"><p>To add lookup information to the target user identity in a policy
|
||
|
|
association, you must be connected to the EIM domain in which you want to
|
||
|
|
work and you must have <a href="rzalveservereimauths.htm#rzalveservereimauths">EIM access control</a> at
|
||
|
|
one of these levels: </p>
|
||
|
|
<ul><li>Registry administrator.</li>
|
||
|
|
<li>Administrator for selected registries (for the registry definition that
|
||
|
|
refers to the user registry that contains the target user identity (ID).</li>
|
||
|
|
<li>EIM administrator.</li>
|
||
|
|
</ul>
|
||
|
|
<p>To add lookup information to the target user identity in a policy
|
||
|
|
association, complete these steps: </p>
|
||
|
|
</div>
|
||
|
|
<ol><li class="stepexpand"><span>Expand <span class="uicontrol">Network > Enterprise Identity Mapping > Domain
|
||
|
|
Management</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select the EIM domain in which you want to work.</span> <ul><li>If the EIM domain you want to work with is not listed under <span class="uicontrol">Domain
|
||
|
|
Management</span>, see <a href="rzalvadmindomainadd.htm#rzalvadmindomainadd">Add an EIM domain to the Domain Management folder</a>.</li>
|
||
|
|
<li>If you are not currently connected to the EIM domain in which you want
|
||
|
|
to work, see <a href="rzalvadmindomaincon.htm#rzalvadmindomaincon"> Connect
|
||
|
|
to the EIM domain controller</a>. </li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span>In the <span class="uicontrol">Mapping Policy</span> dialog, use the pages
|
||
|
|
to view policy associations for the domain. </span></li>
|
||
|
|
<li class="stepexpand"><span>Find and select the policy association for the target registry
|
||
|
|
that contains the target user identity for which you want to add lookup information. </span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Details...</span> to display the appropriate <span class="uicontrol">Policy
|
||
|
|
Association - Details</span> dialog for the type of policy association
|
||
|
|
that you selected. Click <span class="uicontrol">Help</span>, if necessary, to determine
|
||
|
|
what information to specify for each field.</span></li>
|
||
|
|
<li class="stepexpand"><span>pecify the <span class="uicontrol">Lookup information</span> that you want
|
||
|
|
to use to further identify the target user identity in this policy association
|
||
|
|
and click <span class="uicontrol">Add</span>. Repeat this step for each lookup information
|
||
|
|
entry that you want to add to the association.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to save your changes and to return
|
||
|
|
to the original <span class="uicontrol">Policy Association - Details</span> dialog.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">OK</span> to exit.</span></li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|