IGA

• Connect Soffid syncserver to your on-premise network
• Create identities (manually, CSV file or authoritative source)
• Add applications
• Design user life cycle workflows

Connect Soffid syncserver to your on-premise network

Description

In order to manage your information system, a component named Sync Server must be installed along with Soffid Console. You must choose one platform as your Sync Server Soffid host and follow the instructions.

Once you have run the corresponding scripts, Soffid will detect the new Sync server. You could check the new Sync server on the Synchronization servers page.

Step-by-step

1. Platform

First, you must select the platform.

Please note that some values are generated based on the following parameters; please check them if you encounter any issues.

The hostname:port used in the following commands is generated to these rules: it uses the soffid.externalURL parameter, if this does not exit, it uses the AutoSSOURL parameter, if this does not exit, Soffid tries to generate the hostname:name.

1.1 Debian, Ubuntu, or any other Debian derivatives

Follow the instructions.

1.2 Redhat, Centos, or Suse

Follow the instructions.

1.3 Windows

Follow the instructions.

1.4 Docker

Follow the instructions.

To upgrade the syncserver proxy version, follow the instructions at the following link: Upgrade syncserver proxy

1.4.2 Docker compose

We can also use the Docker URL in a docker compose file.

This is the template to use in your docker-compose.yaml file.

Replace the VERSION and DOCKER-URL-COPIED-FROM-WIZARD parameters with their values.

services:

  syncserver-proxy:
    image: soffid/iam-sync:VERSION
    hostname: syncserver-proxy
    environment:
      SOFFID_CONFIG: 'DOCKER-URL-COPIED-FROM-WIZARD'
    networks:
      - network
    volumes:
      - syncserver-proxy-conf:/opt/soffid/iam-sync/conf

networks:

  network:
    name: network
    driver: bridge

volumes:

  syncserver-proxy-conf:
    name: syncserver-proxy-conf

To update the proxy version on the synchronisation server, simply update the syncserver version and redeploy the container.

Here is some further information on Docker Compose commands.

2. Confirmation

Finally, Soffid will detect that the Sync Server has been successfully installed and you can click the Finish button.

You could check the new Sync server on the Synchronization servers page and in the Sync server monitoring page.

Create identities (manually, CSV file or authoritative source)

Description

You need to register the identities to manage and protect them. This wizard allows you to choose the easiest way to do it.

Step-by-step

1. First, you must select one option to register the identities. Soffid allows you three options.

2. You must follow the  steps, depending on the selected option:

2.1. Load from a CSV file: this option allows you to load identities from a CSV file.

2.1.1. First of all, you need to pick up the CSV file.

2.1.2. Second, Soffid will display the file data to check contents

2.1.3. Then you must select the proper mapping for each CSV file column. And finally, click the Import Button and Soffid will add the identities to the platform.

2.1.4. Soffid will display the result of the process.

2.2. Configure an authoritative data source to always have up-to-date information: this option allows you to configure an Active Directory agent, or a Relational database agent to load the identities.

Once the process will finish, you could check the new agent on the agent's page Main Menu > Administration > Configuration > Integration engine > Agents

For more information about the agents, you can visit the Agents page.

2.2.1. Active Directory

• To configure the AD connection you must fill in the required fields and click the Next button.
• Then Soffid will run the Authoritative load and the Reconcile process
• Finally, you could check the result on the Scheduled tasks page. 

2.2.2. Relational database (SQL)

2.3. Register them manually: this option browses to the User page to register the identities manually

Add applications

Description

The wizard allows you to add Applications or Information Systems to Soffid as well. The wizard allows you to choose from an application list. Once you choose one of them, you must fill in the required fields to connect to this application. Then the Reconcile process will be launched.

Step-by-step

1. First, you need to select the proper application to add. Soffid provides you a huge application list to configure.

2. Once you select the application, you must configure the connection parameters.

3. Then, Soffid allows you to choose the strategy to load accounts.

4. Then Soffid will run the reconcile process

5. Finally, the process ends.

Design user life cycle workflows

Description

When you select the option "Design user life cycle workflows", Soffid will browse to the BPM Editor page, where you could define new workflows or import existing workflows from a file.

For more information, you can visit the BPM Editor book.

Screen overview