Testing EIM identity mappings

Now that you have created all the associations that you need, verify that EIM mapping lookup operations return the correct results based on the configured associations. For this scenario, test the mappings used for the identifier associations for each of the administrators and test the mappings used for the default registry policy associations. To test the EIM mappings, follow these steps:

Test mappings for John Day

To test that identifier mappings work as expected for John Day, follow these steps:

1. In iSeries™ Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.

   You might be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:

   1. User type: Distinguished name
   2. Distinguished name: cn=administrator
   3. Password: mycopwd

      Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.

2. Right-click MyCoEimDomain and select Test a mapping.

3. On the Test a mapping dialog box, specify or click Browse to select the following information, and click Test:

   1. Source registry: MYCO.COM

   2. Source user: jday

   3. Target registry: SYSTEMA.MYCO.COM
   Results will display in the Mapping found portion of the page, as follows:

   For these fields	See these results
   Target user	JOHND
   Origin	EIM Identifier: John Day

4. Click Close.

5. Repeat these steps but select SYSTEMB.MYCO.COM for the Target registry field. Results will display in the Mapping found portion of the page, as follows:

   For these fields	See these results
   Target user	DAYJO
   Origin	EIM Identifier: John Day

   Test mappings for Sharon Jones

   To test the mappings used for the individual associations for Sharon Jones, follow these steps:

6. In iSeries Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.

   You might be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:

   1. User type: Distinguished name
   2. Distinguished name: cn=administrator
   3. Password: mycopwd

      Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.

7. Right-click MyCoEimDomain and select Test a mapping.

8. On the Test a mapping dialog box, specify or click Browse to select the following information, and click Test:

   1. Source registry: MYCO.COM

   2. Source user: sjones

   3. Target registry: SYSTEMA.MYCO.COM
   Results will display in the Mapping found portion of the page, as follows:

   For these fields	See these results
   Target user	SHARONJ
   Origin	EIM Identifier: Sharon Jones

9. Click Close.

10. Repeat steps through 1 to 9 but select SYSTEMB.MYCO.COM for the Target registry field. Results are displayed in the Mapping found portion of the page, as follows:

    For these fields	See these results
    Target user	JONESSH
    Origin	EIM Identifier: Sharon Jones

    Test mappings used for default registry policy associations

    To test that mappings work as expected for the users in the Order Receiving Department, as based on the policy associations that you defined, follow these steps:

11. In iSeries Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.

    You might be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog box is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:

    1. User type: Distinguished name
    2. Distinguished name: cn=administrator
    3. Password: mycopwd

       Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.

12. Right-click MyCoEimDomain and select Test a mapping.

13. On the Test a mapping dialog box, specify or click Browse to select the following information, and click Test:
    1. Source registry: MYCO.COM
    2. Source user: mmiller
    3. Target registry: SYSTEMA.MYCO.COM

       Results are displayed in the Mapping found portion of the page, as follows:

       For these fields	See these results
       Target user	SYSUSERA
       Origin	Registry policy association

14. Click Close.