Creating EIM identifiers for two administrators, John Day and Sharon Jones

 

As part of setting up your single signon test environment, you need to create EIM identifiers for two of your administrators so they can both log on to System i™ environments using their Windows® user identities. In this scenario, you create two EIM identifiers, one named John Day and the other named Sharon Jones.

To create the EIM identifiers, follow these steps:

  1. In iSeries™ Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain.

    You may be prompted to connect to the domain controller. In that case, the Connect to EIM Domain Controller dialog is displayed. You must connect to the domain before you can perform actions in it. To connect to the domain controller, provide the following information and click OK:

    • User type: Distinguished name

    • Distinguished name: cn=administrator

    • Password: mycopwd

      Any and all passwords specified in this scenario are for example purposes only. To prevent a compromise to your system or network security, you should never use these passwords as part of your own configuration.

  2. Right-click Identifiers and select New Identifier....

  3. On the New EIM Identifier dialog, enter John Day in the Identifier field.

  4. Click OK.

Repeat steps 2 through 4, but enter Sharon Jones in the Identifier field.

Now that you have created an EIM identifier for each of the administrators, create identifier associations that map user identities to the identifiers. First, create the identifier associations for John Day.

 

Parent topic:

Scenario: Enabling single signon for i5/OS
Previous topic: Testing network authentication service on System A and System B
Next topic: Creating identifier associations for John Day