Creating EIM identifier association

 

Identifier associations define a relationship between an Enterprise Identity Mapping (EIM) identifier and a user identity in your enterprise for the person or entity to whom the EIM identifier refers.

You can create three types of identifier association: target, source, and administrative. To prevent potential problems with associations and how they map identities, see Developing an identity mapping plan .

To create an identifier association, be connected to the EIM domain in which you want to work and have the EIM access control required by the type of association that you want to create.

To create a source or an administrative association, have EIM access control at one of these levels:

• Identifier administrator.

• EIM administrator.

To create a target association, have EIM access control at one of these levels:

• Registry administrator.

• Administrator for selected registries (for the registry definition that refers to the user registry that contains the target user identity)

• EIM administrator.

To create an identifier association, complete these steps:

1. Expand Network > Enterprise Identity Mapping > Domain Management.

2. Select the EIM domain in which you want to work.

   • If the EIM domain you want to work with is not listed under Domain Management, see Adding an EIM domain to the Domain Management folder.

   • If you are not currently connected to the EIM domain in which you want to work, see Connecting to an EIM domain.

3. Expand the EIM domain to which you are now connected.

4. Click Identifiers to display the list of EIM identifiers for the domain.

   Sometimes when you attempt to expand the Identifiers folder, it may take a long time before the list of identifiers displays. To improve performance when you have a large number of EIM identifiers in the domain, see Customizing the EIM identifiers view.

5. Right-click the EIM identifier for which you want to create an association and select Properties...

6. Select the Associations page and click Add....

7. In the Add Association dialog, provide information to define the association, as follows:

   • The name of the registry that contains the user identity that you want to associate with the EIM identifier. Specify the exact name of an existing registry definition or browse to select one.

   • The name of the user identity that you want to associate with the EIM identifier.

   • The type of association. You can create one of three different types of associations:

     • Administrative

     • Source

     • Target

8. Click Help, if necessary, to determine what information to specify for each field.

9. Optional. For a target association, click Advanced... to display the Add Association - Advanced dialog. Specify lookup information for the target user identity and click OK to return to the Add Association dialog.

10. After you provide the required information, click OK to create the association.

 

Parent topic:

Creating EIM associations